Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa
File:                     3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa (raw, json)
Hash identifier:          +dLA+Yq702uJfT8seakyO92ZYVPHBtDOWKijZbl0yew=
Subject key identifier:   CF:3F:DA:0C:B6:1C:FE:DC:51:E0:70:D0:AB:06:C0:90:F6:29:6B:0A
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       6242F420AC3FE8F9C6759F203EAD5641E660D926
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:08 +0000
ROA not before:           Wed 16 Apr 2025 19:44:08 +0000
ROA not after:            Wed 15 Apr 2026 19:49:08 +0000
asID:                     396097
IP address blocks:        172.98.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:42:f4:20:ac:3f:e8:f9:c6:75:9f:20:3e:ad:56:41:e6:60:d9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:08 2025 GMT
            Not After : Apr 15 19:49:08 2026 GMT
        Subject: CN=CF3FDA0CB61CFEDC51E070D0AB06C090F6296B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:93:e6:02:4c:60:45:16:17:34:b7:5c:4f:
                    e7:ba:07:b3:c4:7d:cb:bc:46:10:45:93:7f:42:47:
                    23:9e:d9:c6:e8:eb:28:86:4f:50:84:c9:b6:b6:df:
                    88:8d:9f:4b:e2:66:6f:f6:55:f4:61:df:75:ff:4c:
                    ce:03:60:55:17:75:e2:99:a3:ec:96:8f:39:b2:fe:
                    69:f3:20:4d:e3:fb:a8:c2:d7:68:9d:6f:f4:f2:38:
                    8b:fe:61:cb:fb:49:a2:3a:82:d6:0e:cc:b3:c7:42:
                    d9:33:7c:54:40:fc:bf:3f:33:08:15:98:42:3c:c9:
                    d5:61:e2:b6:b2:a4:f9:b4:5a:2b:54:1f:32:76:b7:
                    3b:2c:94:5a:e7:64:c5:03:9d:b9:6f:d7:cf:5e:08:
                    ae:82:1d:40:bc:b7:df:f1:18:40:60:f6:dc:63:74:
                    4b:14:b2:22:93:a6:46:34:ac:82:ad:61:f1:31:c6:
                    9d:41:45:ea:cd:db:77:40:d9:47:bf:15:82:15:55:
                    89:45:1f:86:8d:97:25:6a:fd:48:a4:d3:9c:b2:cf:
                    28:1a:d6:91:9e:8a:4b:3c:dd:e3:4e:73:ac:c3:7c:
                    b2:62:99:b7:00:f0:ba:19:a7:76:2d:d1:97:be:ad:
                    9d:28:d8:28:02:47:93:60:e6:13:ed:39:b1:9b:7d:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3F:DA:0C:B6:1C:FE:DC:51:E0:70:D0:AB:06:C0:90:F6:29:6B:0A
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:ae:8b:e0:01:e5:2d:62:cf:41:86:06:d5:82:4c:d9:2c:29:
         19:2b:0c:22:cb:7e:da:c2:c3:a9:38:3d:6a:c3:16:48:e8:d4:
         00:0f:33:4d:c7:81:fc:42:72:1c:8c:7c:13:a8:79:a9:66:74:
         fe:e3:97:ae:a8:a8:82:d5:12:34:66:3b:d6:5b:07:10:73:5b:
         e5:e7:99:03:e5:a2:4d:93:40:2b:e9:61:0e:2a:f0:a1:bc:a6:
         10:33:58:22:76:f8:e2:77:2b:31:75:f6:7a:3c:92:67:0c:9a:
         63:de:04:f8:5c:77:6b:39:0f:51:b0:f5:c3:b6:2b:59:43:80:
         53:6b:d6:37:13:6a:b2:66:ad:f9:92:d3:5c:0c:72:11:1a:24:
         52:b7:6d:c4:fa:fd:1c:9b:6d:c6:f9:3f:c7:ef:64:5c:b1:b7:
         8d:e2:d7:b2:0f:b6:6e:0f:4a:cf:b7:39:1f:e5:02:86:6b:47:
         a6:29:13:42:f9:d5:23:cf:3e:2e:62:f0:74:cb:5a:d4:56:5e:
         a1:12:ae:68:d7:f9:93:9d:3f:79:60:ed:ab:61:30:2d:4e:9e:
         96:3f:01:04:e2:bd:53:ec:b0:b2:54:4a:16:81:06:cc:67:de:
         94:82:1f:8a:e3:1c:e5:d0:44:eb:3b:c3:d9:e0:88:8c:03:46:
         25:96:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:24 2025 by rpki-client