Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3230382e39352e3233322e302f32312d3231203d3e20333936303937.roa
File:                     3230382e39352e3233322e302f32312d3231203d3e20333936303937.roa (raw, json)
Hash identifier:          car6ITTOupqiFHPFabvPXAelUJNWRvDZyRnl5F1/bUo=
Subject key identifier:   FB:B4:E0:01:FE:A8:E2:D6:55:CA:BE:EE:0E:44:D0:97:C7:EE:7A:63
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       09AA659855F5F722F89504410562E04ECA76DF4C
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230382e39352e3233322e302f32312d3231203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:08 +0000
ROA not before:           Wed 16 Apr 2025 19:44:08 +0000
ROA not after:            Wed 15 Apr 2026 19:49:08 +0000
asID:                     396097
IP address blocks:        208.95.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 09:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:aa:65:98:55:f5:f7:22:f8:95:04:41:05:62:e0:4e:ca:76:df:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:08 2025 GMT
            Not After : Apr 15 19:49:08 2026 GMT
        Subject: CN=FBB4E001FEA8E2D655CABEEE0E44D097C7EE7A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:cc:4f:e9:10:2a:aa:c1:cc:8f:c2:74:20:
                    8e:a7:ec:32:e6:af:63:a3:c9:74:b2:f2:a6:ee:22:
                    71:11:1e:3f:de:b4:e5:44:be:43:5a:b0:12:6d:f5:
                    c5:59:09:de:12:3b:e8:67:55:e8:f7:96:04:b6:28:
                    d8:39:d7:f4:15:54:d0:ff:75:b7:4f:c0:b8:f5:7a:
                    e7:96:44:c8:f4:34:7d:a0:d4:67:63:ef:5f:d6:45:
                    09:82:c2:da:94:38:be:a8:0a:85:31:c7:fb:c6:91:
                    9c:c8:48:a0:d0:b3:21:4e:9f:84:b2:5a:31:38:3a:
                    cc:ce:1d:08:28:96:00:9d:63:3a:97:97:29:7e:29:
                    60:69:1a:12:d2:1d:8c:6b:d6:51:ee:7d:4f:14:e0:
                    61:f4:f4:c1:f3:a2:11:6d:04:71:ab:bc:85:56:62:
                    a5:26:c8:2a:84:49:31:fc:a1:f2:ad:91:e5:fa:c9:
                    ed:03:0b:cc:03:13:fc:6b:9d:b8:bc:0b:1e:3c:30:
                    77:2e:22:de:8e:b4:8c:2d:c8:f7:0f:cd:bd:ce:ae:
                    37:e3:c9:1e:1d:06:f5:5d:9f:95:52:c3:04:c6:d8:
                    6c:36:60:0e:12:9e:67:27:97:de:f5:24:b7:73:d8:
                    aa:40:d3:e0:86:f0:f0:2f:c4:a2:83:14:48:ee:f9:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:E0:01:FE:A8:E2:D6:55:CA:BE:EE:0E:44:D0:97:C7:EE:7A:63
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230382e39352e3233322e302f32312d3231203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:1b:5d:cc:39:6f:68:89:ce:44:93:49:42:41:18:98:6f:
         6e:86:22:f2:34:38:12:99:bf:e6:b6:c0:a2:13:d7:87:30:1e:
         2e:9e:66:67:35:84:71:db:06:7a:27:63:cc:42:0e:a1:ba:39:
         7e:f2:94:75:3c:ce:13:31:2b:ca:82:91:43:37:73:2c:52:80:
         fa:88:50:1c:b5:1f:af:d7:f3:1e:f2:82:04:b2:f9:89:11:8a:
         aa:66:6d:af:08:3b:30:ab:fd:c3:4c:a0:23:fe:fe:0a:0f:52:
         cf:b6:12:09:0d:88:98:58:3b:62:09:81:2a:97:9a:e9:db:4b:
         b8:08:30:5a:8b:f2:f6:60:09:12:91:1e:84:76:a4:c3:64:c0:
         3e:ec:e4:0b:d6:5c:91:66:30:7b:8a:49:7d:e5:ff:fb:2d:bb:
         81:03:c1:99:3b:4b:99:f6:64:e0:47:da:d9:ca:48:b7:9c:56:
         58:94:f0:6a:97:22:94:5e:43:83:0f:55:38:2a:f6:e1:b3:03:
         8f:c8:91:41:d5:8e:bf:0b:ab:d7:6c:a2:5e:fc:cd:ef:c3:bc:
         4d:4f:92:c1:b6:d6:03:36:d4:2c:17:e5:06:78:9f:7f:8d:d5:
         b3:a0:49:b1:e1:94:3d:dd:f7:05:f1:b5:0b:c1:2c:04:b5:f0:
         e4:66:6b:07
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUCaplmFX19yL4lQRBBWLgTsp230wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFhYTAx
MjVlNzY3NTVhNzg1NjNjODYwHhcNMjUwNDE2MTk0NDA4WhcNMjYwNDE1MTk0OTA4
WjAzMTEwLwYDVQQDEyhGQkI0RTAwMUZFQThFMkQ2NTVDQUJFRUUwRTQ0RDA5N0M3
RUU3QTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU/MT+kQKqrB
zI/CdCCOp+wy5q9jo8l0svKm7iJxER4/3rTlRL5DWrASbfXFWQneEjvoZ1Xo95YE
tijYOdf0FVTQ/3W3T8C49XrnlkTI9DR9oNRnY+9f1kUJgsLalDi+qAqFMcf7xpGc
yEig0LMhTp+EsloxODrMzh0IKJYAnWM6l5cpfilgaRoS0h2Ma9ZR7n1PFOBh9PTB
86IRbQRxq7yFVmKlJsgqhEkx/KHyrZHl+sntAwvMAxP8a524vAsePDB3LiLejrSM
Lcj3D829zq4348keHQb1XZ+VUsMExthsNmAOEp5nJ5fe9SS3c9iqQNPghvDwL8Si
gxRI7vnsUwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFPu04AH+qOLWVcq+7g5E0JfH
7npjMB8GA1UdIwQYMBaAFN/FUJdo6lh+Y40gaAAy4P8SK9JaMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuc2FpbHguY28vcmVw
by9TYWlsLUludGVybmV0LUluYy8wL0RGQzU1MDk3NjhFQTU4N0U2MzhEMjA2ODAw
MzJFMEZGMTIyQkQyNUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0
LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYmM0YmY1YS0xZDA2LTRhM2Yt
OTcwNi1hMThmYTJkODY3MGMvZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFh
YTAxMjVlNzY3NTVhNzg1NjNjODYuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYB
BQUHMAuGa3JzeW5jOi8vcnBraS5zYWlseC5jby9yZXBvL1NhaWwtSW50ZXJuZXQt
SW5jLzAvMzIzMDM4MmUzOTM1MmUzMjMzMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNl
MjAzMzM5MzYzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPQX+gwDQYJKoZIhvcNAQELBQADggEB
AB8wG13MOW9oic5Ek0lCQRiYb26GIvI0OBKZv+a2wKIT14cwHi6eZmc1hHHbBnon
Y8xCDqG6OX7ylHU8zhMxK8qCkUM3cyxSgPqIUBy1H6/X8x7yggSy+YkRiqpmba8I
OzCr/cNMoCP+/goPUs+2EgkNiJhYO2IJgSqXmunbS7gIMFqL8vZgCRKRHoR2pMNk
wD7s5AvWXJFmMHuKSX3l//stu4EDwZk7S5n2ZOBH2tnKSLecVliU8GqXIpReQ4MP
VTgq9uGzA4/IkUHVjr8Lq9dsol78ze/DvE1PksG21gM21CwX5QZ4n3+N1bOgSbHh
lD3d9wXxtQvBLAS18ORmawc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:04 2025 by rpki-client