Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3134382e35392e35382e302f32332d3233203d3e20333936303937.roa
File:                     3134382e35392e35382e302f32332d3233203d3e20333936303937.roa (raw, json)
Hash identifier:          Di90/vSgLIBJPokIOmwok7gZLJLdJhNB1RcF6gxW5tA=
Subject key identifier:   8E:08:06:CC:4C:90:3E:AE:74:4D:F3:D6:81:48:11:A2:14:9A:78:C1
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       446C54B8E4A407ABF994C86C59B60FBABC018132
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134382e35392e35382e302f32332d3233203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:07 +0000
ROA not before:           Wed 16 Apr 2025 19:44:07 +0000
ROA not after:            Wed 15 Apr 2026 19:49:07 +0000
asID:                     396097
IP address blocks:        148.59.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 09:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6c:54:b8:e4:a4:07:ab:f9:94:c8:6c:59:b6:0f:ba:bc:01:81:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:07 2025 GMT
            Not After : Apr 15 19:49:07 2026 GMT
        Subject: CN=8E0806CC4C903EAE744DF3D6814811A2149A78C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:bb:d2:fb:73:db:26:da:6d:fd:bb:55:14:
                    b3:a6:5f:34:aa:90:6a:31:9e:60:52:3a:56:1b:1f:
                    f9:6d:27:e7:f4:d6:8c:19:a6:c8:d2:d8:5e:17:c7:
                    79:02:ef:90:d1:b8:b3:13:09:c7:f5:ce:b1:7a:07:
                    01:16:07:ef:2b:16:bd:53:4f:44:00:97:5a:8b:93:
                    bb:5a:d8:67:1d:d5:dd:3e:a1:4c:a8:bc:b5:93:48:
                    09:48:f0:77:0f:21:de:5a:22:e9:72:35:6b:a9:e1:
                    4a:a3:d0:56:df:8b:41:1f:ad:4b:91:bf:c8:e4:6f:
                    23:7b:97:a3:10:98:4f:08:e4:d3:b5:08:30:d0:4f:
                    c9:fa:fd:78:64:71:9a:b1:0f:f1:1c:82:83:80:dc:
                    67:0c:72:29:d1:a4:5d:71:84:bf:6c:96:e0:bf:25:
                    1b:1f:a5:c2:27:47:bc:40:f0:bd:b8:8d:4a:1e:ca:
                    2a:cb:b8:c6:f4:b0:07:81:da:ea:80:8d:34:b9:82:
                    44:db:8a:1f:9b:37:e0:4c:f9:f9:6c:c0:2e:a3:15:
                    aa:26:57:0d:51:30:5e:57:ff:89:a2:bc:77:59:b5:
                    6f:47:3f:7a:d1:24:fa:c3:81:94:48:c6:b9:b9:38:
                    70:c6:72:9b:d8:11:81:49:41:19:ec:0d:32:9a:f9:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:08:06:CC:4C:90:3E:AE:74:4D:F3:D6:81:48:11:A2:14:9A:78:C1
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134382e35392e35382e302f32332d3233203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:00:ac:28:8d:5c:7e:89:5b:4e:c2:71:57:e8:0a:af:0c:6f:
         77:3f:95:c6:dc:8f:98:89:8c:6a:e9:0f:70:ee:fa:24:09:f9:
         95:0c:5e:6c:95:07:fb:d4:a9:05:23:e3:74:3a:ca:d8:76:55:
         dc:f0:be:9a:a9:8d:5d:f2:92:02:9c:80:0d:81:0c:df:0c:29:
         b3:99:77:ac:4e:e0:02:16:a3:42:00:78:23:d6:d6:79:42:3e:
         05:df:d4:5b:fa:7c:e7:e2:a5:07:a8:07:47:f7:a4:f9:fa:bb:
         24:1d:59:6b:e1:46:f4:b7:9f:69:08:70:63:8d:62:e1:62:cc:
         78:33:07:ea:1e:fc:3b:54:6e:d4:40:d9:aa:ae:4d:59:db:11:
         bd:db:26:b1:4b:22:c3:67:d8:95:b4:fb:19:48:cc:17:76:5e:
         6a:28:e8:ab:77:3b:a2:34:96:ca:b7:7e:5a:84:65:33:cf:e5:
         f9:4c:4a:bc:bd:92:a1:22:74:9b:ac:ae:5f:e6:7c:ff:9c:c4:
         5f:f3:ca:9b:9e:52:4d:8e:e3:c4:ac:4f:f6:6b:13:3c:31:1c:
         4c:cf:e1:5a:55:c0:1d:62:28:8a:92:27:cf:c9:34:cd:56:30:
         1e:c2:6b:98:4b:a5:65:74:92:c9:68:d1:14:99:97:8f:2f:7a:
         39:07:6c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:54 2025 by rpki-client