Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa
File:                     32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa (raw, json)
Hash identifier:          J/sZCvGBZjVAxTSBshOENRU0+lbFFMisBDhuurRONks=
Subject key identifier:   C8:24:F6:78:85:8A:F8:57:D0:47:4A:9F:CF:72:5B:F1:FD:04:74:BB
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       50BF2A67F3713BBA03084ECCB2CCFC906B2268CC
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa
Signing time:             Wed 15 May 2024 19:32:04 +0000
ROA not before:           Wed 15 May 2024 19:27:04 +0000
ROA not after:            Wed 14 May 2025 19:32:04 +0000
asID:                     396097
IP address blocks:        23.152.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bf:2a:67:f3:71:3b:ba:03:08:4e:cc:b2:cc:fc:90:6b:22:68:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: May 15 19:27:04 2024 GMT
            Not After : May 14 19:32:04 2025 GMT
        Subject: CN=C824F678858AF857D0474A9FCF725BF1FD0474BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:68:9b:e9:41:2c:e2:a5:78:ee:f6:0f:06:
                    ce:ae:cb:fa:52:25:ff:78:be:66:5d:0b:57:ed:18:
                    8e:f1:22:b1:28:5c:e4:68:09:03:47:fc:ff:7d:38:
                    fc:c5:cb:85:9f:79:3e:df:14:96:2d:48:c7:b6:c9:
                    d3:e3:0c:1d:8e:7c:47:18:34:b5:6d:33:cc:28:a6:
                    db:00:e4:71:c0:8c:00:6c:72:1a:6c:17:f0:03:d6:
                    81:fb:7f:8a:e0:81:47:55:02:a3:13:31:bc:df:33:
                    81:e1:20:2c:5a:6a:5f:e6:0c:92:5e:56:35:60:cf:
                    07:dc:1d:2f:17:ec:b9:d0:26:8f:a7:2c:1c:bc:9f:
                    4f:1e:b8:01:5f:cf:e0:ee:dc:5b:07:57:a0:44:cf:
                    bc:fc:63:8d:6e:a3:15:5f:ae:ef:a6:ee:a5:f9:a5:
                    e4:6c:d6:88:60:a9:35:9a:b4:02:1b:63:7b:21:41:
                    03:55:0a:89:25:ab:96:96:58:15:d8:56:23:1a:d0:
                    e7:3c:76:6a:92:4c:c4:77:e7:70:d6:37:7e:72:1a:
                    2e:c5:75:59:32:4e:19:15:b3:3e:8a:de:59:ec:ad:
                    20:b0:4f:52:81:d2:81:0e:35:95:c8:19:c2:8d:a7:
                    78:a2:ba:0a:0a:d4:ff:a2:ee:30:ac:54:d1:e2:ce:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:24:F6:78:85:8A:F8:57:D0:47:4A:9F:CF:72:5B:F1:FD:04:74:BB
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:c4:4b:75:54:e7:2b:ef:fb:88:32:7a:40:d8:85:87:94:
         6a:76:92:76:de:d9:e5:e6:81:c7:d0:15:90:b2:62:2f:a1:7f:
         db:cc:27:55:0b:f9:01:71:49:c7:7a:79:d9:21:26:e6:de:9d:
         b5:b3:0d:44:29:66:ea:97:21:0c:74:e9:7c:3b:c5:cb:72:05:
         64:35:cc:c6:7e:72:f4:eb:86:58:ac:53:a0:69:a7:91:7a:40:
         5b:08:d2:a5:16:ad:6b:f4:62:45:ef:b1:e7:b9:b1:97:29:24:
         b8:c2:b4:2c:33:4e:d4:4c:ca:33:fc:cb:84:93:0f:42:34:f7:
         d9:da:75:f8:90:ae:62:53:e7:6b:d5:32:b2:a2:4e:5a:14:b8:
         4e:79:3b:9a:2f:6d:9e:fd:9c:c2:0d:cd:da:d9:f5:10:9b:51:
         ed:70:dc:90:ce:72:b4:83:ec:cb:93:ff:d6:0e:5f:3b:14:90:
         e0:a4:87:0d:32:00:81:d3:cf:05:48:5e:67:3f:16:94:f5:0f:
         30:9c:17:ec:d9:3b:79:f6:05:c2:1b:44:9c:c3:b8:2b:8c:31:
         9a:e2:9d:1e:37:24:95:44:bc:a3:5f:b1:cf:0e:ae:c5:3a:35:
         e5:fe:14:1e:0c:e1:14:62:cf:e6:f8:49:b4:d7:de:44:2d:c1:
         13:e4:dc:a5
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUUL8qZ/NxO7oDCE7Mssz8kGsiaMwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFhYTAx
MjVlNzY3NTVhNzg1NjNjODYwHhcNMjQwNTE1MTkyNzA0WhcNMjUwNTE0MTkzMjA0
WjAzMTEwLwYDVQQDEyhDODI0RjY3ODg1OEFGODU3RDA0NzRBOUZDRjcyNUJGMUZE
MDQ3NEJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuxom+lBLOKl
eO72DwbOrsv6UiX/eL5mXQtX7RiO8SKxKFzkaAkDR/z/fTj8xcuFn3k+3xSWLUjH
tsnT4wwdjnxHGDS1bTPMKKbbAORxwIwAbHIabBfwA9aB+3+K4IFHVQKjEzG83zOB
4SAsWmpf5gySXlY1YM8H3B0vF+y50CaPpywcvJ9PHrgBX8/g7txbB1egRM+8/GON
bqMVX67vpu6l+aXkbNaIYKk1mrQCG2N7IUEDVQqJJauWllgV2FYjGtDnPHZqkkzE
d+dw1jd+chouxXVZMk4ZFbM+it5Z7K0gsE9SgdKBDjWVyBnCjad4oroKCtT/ou4w
rFTR4s4gWwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFMgk9niFivhX0EdKn89yW/H9
BHS7MB8GA1UdIwQYMBaAFN/FUJdo6lh+Y40gaAAy4P8SK9JaMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuc2FpbHguY28vcmVw
by9TYWlsLUludGVybmV0LUluYy8wL0RGQzU1MDk3NjhFQTU4N0U2MzhEMjA2ODAw
MzJFMEZGMTIyQkQyNUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0
LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYmM0YmY1YS0xZDA2LTRhM2Yt
OTcwNi1hMThmYTJkODY3MGMvZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFh
YTAxMjVlNzY3NTVhNzg1NjNjODYuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYB
BQUHMAuGa3JzeW5jOi8vcnBraS5zYWlseC5jby9yZXBvL1NhaWwtSW50ZXJuZXQt
SW5jLzAvMzIzMzJlMzEzNTMyMmUzMTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNl
MjAzMzM5MzYzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEXmIAwDQYJKoZIhvcNAQELBQADggEB
AGNNxEt1VOcr7/uIMnpA2IWHlGp2knbe2eXmgcfQFZCyYi+hf9vMJ1UL+QFxScd6
edkhJubenbWzDUQpZuqXIQx06Xw7xctyBWQ1zMZ+cvTrhlisU6Bpp5F6QFsI0qUW
rWv0YkXvsee5sZcpJLjCtCwzTtRMyjP8y4STD0I099nadfiQrmJT52vVMrKiTloU
uE55O5ovbZ79nMINzdrZ9RCbUe1w3JDOcrSD7MuT/9YOXzsUkOCkhw0yAIHTzwVI
Xmc/FpT1DzCcF+zZO3n2BcIbRJzDuCuMMZrinR43JJVEvKNfsc8OrsU6NeX+FB4M
4RRiz+b4SbTX3kQtwRPk3KU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:48:53 2024 by rpki-client on console-ams.rpki-client.org