Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa
File:                     323630343a323163303a3a2f33322d3332203d3e20333936303937.roa (raw, json)
Hash identifier:          iLOG6Roxh/Ja3IqLUngchbk0PanIKtEv8h2Icu2rGbM=
Subject key identifier:   5A:E3:D0:F9:CE:EB:C6:F6:69:22:AE:3C:D4:85:3C:28:94:E7:12:40
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       6F6CC5620A2CBC2EFC844DBAD961255F40BE269E
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:07 +0000
ROA not before:           Wed 16 Apr 2025 19:44:07 +0000
ROA not after:            Wed 15 Apr 2026 19:49:07 +0000
asID:                     396097
IP address blocks:        2604:21c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 09:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6c:c5:62:0a:2c:bc:2e:fc:84:4d:ba:d9:61:25:5f:40:be:26:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:07 2025 GMT
            Not After : Apr 15 19:49:07 2026 GMT
        Subject: CN=5AE3D0F9CEEBC6F66922AE3CD4853C2894E71240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:12:8b:06:dc:9e:a5:ea:93:22:e3:c8:76:
                    5e:89:ad:62:a5:7e:bf:9d:9a:b5:39:92:86:20:6e:
                    14:f2:87:b4:17:1e:a7:aa:ce:72:14:3f:91:c6:47:
                    4d:03:6c:9d:98:86:0a:2a:da:39:7f:03:fe:97:35:
                    dd:f4:3b:41:bc:fc:c5:3d:92:b4:58:cf:29:46:ea:
                    d1:56:6e:3e:dd:60:bc:be:a1:75:3c:24:8a:39:cf:
                    cb:cb:ca:2f:c3:e3:c4:c1:44:2c:f0:1a:8b:f9:ed:
                    54:b1:d2:0e:8b:62:e5:23:d3:dd:c8:d6:73:6c:f0:
                    3d:b4:82:28:6c:4f:f8:43:98:3f:db:4e:5c:8d:71:
                    99:47:95:c3:18:b8:ec:67:ca:7e:07:42:62:f2:a1:
                    02:9c:99:5b:a0:50:3f:8f:ca:44:2d:c5:6d:5a:9b:
                    d3:c0:e9:85:a6:86:c3:2d:4d:f9:c8:7c:a7:09:ef:
                    ca:e3:b1:db:93:e8:43:72:87:a7:c1:76:62:cb:db:
                    21:72:e5:47:2f:2d:78:a3:d1:10:e5:aa:50:b6:8e:
                    d2:29:a2:f9:fc:87:97:05:f5:aa:e4:b7:1e:44:f3:
                    3d:31:f3:cf:fc:99:51:ce:ac:e0:fc:38:95:c7:57:
                    06:4e:00:b0:a8:13:fb:46:86:5b:ab:a6:b4:30:57:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:D0:F9:CE:EB:C6:F6:69:22:AE:3C:D4:85:3C:28:94:E7:12:40
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:69:f7:b8:1f:cf:ef:8b:b4:4f:a7:53:bb:a4:f8:42:6a:
         0c:aa:92:91:41:63:eb:aa:1d:7b:42:0a:2e:64:88:38:56:b5:
         9b:25:d7:e7:ef:fd:95:5f:d5:98:ec:bd:92:e8:43:25:d8:c9:
         fe:eb:f0:af:91:df:c1:89:97:97:88:2c:36:d2:31:2b:6e:40:
         10:f4:63:3b:e6:33:59:12:b3:16:f4:49:e5:57:44:b6:03:b8:
         34:76:28:12:0f:00:7b:89:fa:86:72:f6:74:ad:bb:32:9f:12:
         fb:cf:63:ef:84:50:0a:f5:25:ee:c9:33:d1:ff:a3:d9:39:69:
         80:6e:40:3b:cf:56:c8:7e:79:7c:53:81:8a:25:70:2a:53:db:
         bb:c2:73:6c:be:62:cb:97:24:80:4f:14:48:39:c0:92:1a:b2:
         51:b9:79:af:ba:6d:51:51:7b:88:2d:c0:70:20:69:f0:5e:e0:
         6e:f2:7c:44:9f:76:c2:84:cb:cc:8e:50:ff:8c:6a:c0:f1:c4:
         cf:95:97:00:dd:fe:33:1d:ae:96:cd:c0:41:f5:62:2b:53:eb:
         7a:ad:97:de:55:f8:f8:18:09:60:53:3b:ec:da:35:02:8e:f0:
         d7:d3:17:e4:22:39:cc:c4:5c:2d:fd:77:2e:e4:20:4b:3a:62:
         d8:e7:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:02 2025 by rpki-client