Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa
File:                     3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa (raw, json)
Hash identifier:          t65g+cZ/nwmMDfBMa/X9oceVtjpsoIAgOnz/T1sjhKE=
Subject key identifier:   1F:0F:99:82:F3:45:C5:DB:C6:0B:4E:DE:AB:80:0C:44:0C:34:E4:93
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       278FCD13D260A50CE56F31410037CB78D12173A0
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:07 +0000
ROA not before:           Wed 16 Apr 2025 19:44:07 +0000
ROA not after:            Wed 15 Apr 2026 19:49:07 +0000
asID:                     396097
IP address blocks:        209.237.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8f:cd:13:d2:60:a5:0c:e5:6f:31:41:00:37:cb:78:d1:21:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:07 2025 GMT
            Not After : Apr 15 19:49:07 2026 GMT
        Subject: CN=1F0F9982F345C5DBC60B4EDEAB800C440C34E493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:36:dd:b8:80:c8:e6:7b:75:ae:06:2f:02:
                    68:5e:91:14:f3:1d:01:3e:71:cf:ae:a7:21:41:1c:
                    68:3a:4b:03:4f:bb:6b:88:a2:a1:80:c0:45:4c:ac:
                    7c:71:86:83:cf:a0:3e:ff:77:30:39:30:e2:ea:ee:
                    d1:16:00:a7:69:df:f6:e0:7c:9a:1d:41:94:51:b3:
                    26:5a:a0:37:51:f9:f0:41:dd:6b:d8:a4:6d:ff:82:
                    3a:5d:f1:18:01:0f:9c:17:53:c8:a2:e3:e3:7f:4d:
                    ac:96:a8:94:83:dc:ba:1c:13:64:f1:5c:68:f9:b2:
                    c0:10:be:f7:de:53:13:96:05:cc:cb:1c:a4:a2:d0:
                    6b:10:2c:1b:95:cc:61:88:a7:0c:0c:50:67:31:25:
                    77:f0:f5:86:e9:a8:56:6d:a7:08:e0:d1:e9:9f:0b:
                    6b:0f:c6:4e:f9:a2:e5:82:92:79:dd:2c:48:db:33:
                    fe:06:cf:4a:aa:a0:5a:a7:99:ca:3d:1d:eb:83:7c:
                    35:d5:c5:71:1d:c8:48:74:5e:d4:1a:a8:a2:c3:b2:
                    88:7d:90:a3:e2:a5:45:13:40:a3:4b:66:8e:36:6f:
                    51:11:55:c3:71:ef:94:2b:cb:d4:d4:37:50:19:a9:
                    73:be:90:db:35:96:86:5a:26:a5:27:73:83:d7:51:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0F:99:82:F3:45:C5:DB:C6:0B:4E:DE:AB:80:0C:44:0C:34:E4:93
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:c8:a2:05:ab:6a:04:a5:0e:c7:1d:16:24:d8:e5:bd:96:
         88:37:c1:ee:9e:d2:0a:4b:99:00:64:99:fa:8e:a2:dd:d4:87:
         cb:8d:e2:0e:74:84:4d:b6:3f:0b:07:85:56:25:e3:14:66:82:
         b4:f7:7c:a2:b3:c9:80:76:92:44:62:54:3c:e3:c8:d4:6c:0c:
         a2:94:eb:a2:d9:c2:c6:4b:80:75:b6:90:d9:b4:09:94:b8:80:
         02:df:c5:ee:21:09:d4:c8:b1:5f:26:8f:5e:71:af:12:7e:1f:
         b2:ae:8f:8f:ac:2b:19:45:03:6c:f0:53:c3:8f:dd:c0:0d:cf:
         52:f1:57:33:55:10:ff:74:e9:48:c0:23:1b:9e:72:55:d0:52:
         0b:4e:03:25:9d:11:6d:98:54:57:9b:04:45:cb:1b:47:c6:35:
         ea:71:98:2e:69:5c:8f:7f:fa:0b:53:39:03:39:e8:90:aa:cb:
         25:18:d2:77:b2:c9:26:99:9b:b1:d1:df:e5:2b:05:ac:a6:1e:
         c1:fc:e6:55:55:0c:37:81:40:c6:f5:70:4d:f8:fe:3d:ee:43:
         85:5b:e8:b8:70:03:3d:fb:11:95:54:bd:3c:0d:dc:fc:d5:50:
         3a:18:df:b5:f6:ca:9c:2d:f8:eb:55:96:0a:6a:0f:45:87:28:
         83:1e:ef:44
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUJ4/NE9JgpQzlbzFBADfLeNEhc6AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFhYTAx
MjVlNzY3NTVhNzg1NjNjODYwHhcNMjUwNDE2MTk0NDA3WhcNMjYwNDE1MTk0OTA3
WjAzMTEwLwYDVQQDEygxRjBGOTk4MkYzNDVDNURCQzYwQjRFREVBQjgwMEM0NDBD
MzRFNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKo23biAyOZ7
da4GLwJoXpEU8x0BPnHPrqchQRxoOksDT7triKKhgMBFTKx8cYaDz6A+/3cwOTDi
6u7RFgCnad/24HyaHUGUUbMmWqA3UfnwQd1r2KRt/4I6XfEYAQ+cF1PIouPjf02s
lqiUg9y6HBNk8Vxo+bLAEL733lMTlgXMyxykotBrECwblcxhiKcMDFBnMSV38PWG
6ahWbacI4NHpnwtrD8ZO+aLlgpJ53SxI2zP+Bs9KqqBap5nKPR3rg3w11cVxHchI
dF7UGqiiw7KIfZCj4qVFE0CjS2aONm9REVXDce+UK8vU1DdQGalzvpDbNZaGWial
J3OD11FAAwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFB8PmYLzRcXbxgtO3quADEQM
NOSTMB8GA1UdIwQYMBaAFN/FUJdo6lh+Y40gaAAy4P8SK9JaMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuc2FpbHguY28vcmVw
by9TYWlsLUludGVybmV0LUluYy8wL0RGQzU1MDk3NjhFQTU4N0U2MzhEMjA2ODAw
MzJFMEZGMTIyQkQyNUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0
LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYmM0YmY1YS0xZDA2LTRhM2Yt
OTcwNi1hMThmYTJkODY3MGMvZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFh
YTAxMjVlNzY3NTVhNzg1NjNjODYuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYB
BQUHMAuGbXJzeW5jOi8vcnBraS5zYWlseC5jby9yZXBvL1NhaWwtSW50ZXJuZXQt
SW5jLzAvMzIzMDM5MmUzMjMzMzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNk
M2UyMDMzMzkzNjMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtHtnDANBgkqhkiG9w0BAQsFAAOC
AQEATAPIogWragSlDscdFiTY5b2WiDfB7p7SCkuZAGSZ+o6i3dSHy43iDnSETbY/
CweFViXjFGaCtPd8orPJgHaSRGJUPOPI1GwMopTrotnCxkuAdbaQ2bQJlLiAAt/F
7iEJ1MixXyaPXnGvEn4fsq6Pj6wrGUUDbPBTw4/dwA3PUvFXM1UQ/3TpSMAjG55y
VdBSC04DJZ0RbZhUV5sERcsbR8Y16nGYLmlcj3/6C1M5AznokKrLJRjSd7LJJpmb
sdHf5SsFrKYewfzmVVUMN4FAxvVwTfj+Pe5DhVvouHADPfsRlVS9PA3c/NVQOhjf
tfbKnC3461WWCmoPRYcogx7vRA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:42 2025 by rpki-client