Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa
File:                     32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa (raw, json)
Hash identifier:          1VlMEGuPgI0zXXvIVPHJhZ3Zk1zCbFqe5o+niMGwdZ0=
Subject key identifier:   99:36:19:37:0A:F7:00:94:90:AE:7C:D5:98:D7:1B:5E:11:5E:6D:2E
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       6349D29F2BB60B15AF109EC4C757FD54576F7BA2
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:09 +0000
ROA not before:           Wed 16 Apr 2025 19:44:09 +0000
ROA not after:            Wed 15 Apr 2026 19:49:09 +0000
asID:                     396097
IP address blocks:        23.152.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:49:d2:9f:2b:b6:0b:15:af:10:9e:c4:c7:57:fd:54:57:6f:7b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:09 2025 GMT
            Not After : Apr 15 19:49:09 2026 GMT
        Subject: CN=993619370AF7009490AE7CD598D71B5E115E6D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:6e:38:9d:a0:1e:97:0a:1a:c7:fa:93:a6:
                    20:23:b4:88:0b:0b:3e:65:52:ba:b7:9b:89:13:62:
                    8e:00:af:3f:b2:c3:22:08:dc:2d:fe:21:e4:6f:00:
                    43:e0:ab:54:d7:ed:92:56:fe:38:f6:fd:07:58:71:
                    c5:3c:46:97:fa:53:48:79:23:15:34:fa:de:c7:c2:
                    27:1e:b2:1d:d8:da:42:de:28:0b:51:ed:b3:86:5f:
                    23:87:14:05:38:35:3e:dc:87:26:da:f0:74:ab:bf:
                    87:19:10:09:4d:0d:8c:73:29:36:33:ce:8a:f7:af:
                    6a:1f:63:4c:ab:28:a8:11:1d:0c:e8:3f:51:20:9b:
                    79:27:c5:76:27:81:81:db:ca:d1:e4:6b:ef:75:e8:
                    8d:9a:04:b4:20:a0:8a:5a:19:07:88:15:86:8d:b8:
                    8c:91:d1:8d:b8:d6:77:d3:5d:0c:73:be:80:e0:83:
                    2d:a0:eb:49:fc:78:22:9d:73:ad:a1:76:c8:50:1b:
                    4c:f8:28:0b:a4:f4:54:bf:ad:69:c0:09:dd:60:81:
                    c4:10:ad:f2:89:9a:56:50:75:87:05:b8:80:a9:31:
                    b9:34:fa:73:ca:e3:60:c8:a7:25:cf:fa:c3:f2:d1:
                    61:9f:0f:f2:b4:e5:8e:0d:1a:6c:54:0f:66:f4:8e:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:36:19:37:0A:F7:00:94:90:AE:7C:D5:98:D7:1B:5E:11:5E:6D:2E
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/32332e3135322e3132382e302f32332d3233203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:6b:30:84:14:3f:b6:91:43:a6:c7:b7:31:c5:19:7e:07:
         4e:41:6e:f6:5a:05:04:d5:05:c7:10:c9:da:3b:a0:6b:75:58:
         98:71:f9:f7:c4:79:b9:a4:d8:9a:c1:f7:13:ea:66:f0:76:80:
         42:ab:60:68:06:67:c8:68:a5:06:9a:15:e1:78:04:b3:91:b1:
         07:af:8b:2f:8a:f7:40:de:ad:7b:80:41:f8:db:86:26:2c:e4:
         1e:e8:25:1b:0d:94:60:91:4a:ec:b0:99:1b:2f:79:1f:9f:be:
         af:7a:e8:7b:ab:73:3d:13:74:0e:18:a6:ec:c3:9f:19:5c:d2:
         93:95:53:01:80:7a:75:5a:65:81:12:1d:75:d2:a3:f5:34:ac:
         d8:d3:54:4f:15:26:2e:13:1b:66:43:b9:5a:00:8c:bf:3c:43:
         db:64:97:07:d7:72:7d:8a:65:60:6d:4f:a1:ae:d0:53:ff:dd:
         d6:6a:3b:85:94:e4:b5:78:bc:df:20:53:2d:9d:40:b8:6c:71:
         ab:86:b6:b2:70:20:71:2f:48:1c:f5:22:a6:d7:23:14:00:d3:
         1e:eb:71:4a:59:6d:e8:77:c8:48:73:9d:e1:11:fc:f3:13:d8:
         de:4a:24:b4:f6:ac:41:a8:1b:35:36:ce:46:ad:2d:5b:c3:2e:
         37:62:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:18 2025 by rpki-client