Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa
File:                     323630343a323163303a3a2f33322d3332203d3e20333936303937.roa (raw, json)
Hash identifier:          R1MCGY3T7Uok/LxWOzrIBiOL6E/hO/zJg6iUnRBuKFc=
Subject key identifier:   A9:67:73:27:6C:BF:BB:DD:F8:00:06:7A:FB:2D:5A:4B:64:23:8F:E1
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       1B6953A6EFBCA16198C301C5734B15DBDA32E0F4
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa
Signing time:             Wed 15 May 2024 19:32:02 +0000
ROA not before:           Wed 15 May 2024 19:27:02 +0000
ROA not after:            Wed 14 May 2025 19:32:02 +0000
asID:                     396097
IP address blocks:        2604:21c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:69:53:a6:ef:bc:a1:61:98:c3:01:c5:73:4b:15:db:da:32:e0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: May 15 19:27:02 2024 GMT
            Not After : May 14 19:32:02 2025 GMT
        Subject: CN=A96773276CBFBBDDF800067AFB2D5A4B64238FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:57:0b:8f:ec:8a:ca:78:22:59:73:77:74:
                    9e:36:13:9b:74:41:f0:1c:aa:b3:ff:4d:32:e9:23:
                    dc:f7:23:6e:72:f2:04:0f:81:f7:e3:08:bd:0e:01:
                    10:74:d9:bd:93:22:f5:b8:bf:8f:c1:44:e9:86:42:
                    8e:d4:94:03:fa:34:29:b4:c3:bc:28:38:78:32:51:
                    fd:9c:fd:9e:60:28:c9:1f:52:13:8a:47:b6:7b:9b:
                    54:18:33:20:a2:ca:17:8e:98:99:a4:ee:5d:9f:1b:
                    4f:86:4b:51:e6:d0:36:14:99:d7:13:2c:55:61:d8:
                    8a:d7:07:82:4f:43:e1:f2:ee:97:15:89:6c:8d:2d:
                    93:50:3f:89:09:a0:e0:65:9d:ad:cb:1a:64:fb:e7:
                    a6:43:c7:21:1a:1b:e9:45:4b:ac:aa:16:11:7e:e8:
                    a7:63:56:5c:fc:b8:5e:cf:37:91:1d:9c:e6:c1:21:
                    cf:2f:74:59:50:86:2b:3a:17:96:6b:cb:26:c2:08:
                    2b:08:56:73:cb:24:ad:77:47:c0:13:ff:a7:9b:5f:
                    50:45:9c:49:b1:c9:e3:a7:01:71:74:d4:c2:46:45:
                    97:a6:2f:5a:9d:74:ff:94:6a:f5:5e:7b:30:2c:1f:
                    ae:25:c2:24:8a:d9:af:c2:da:ab:a3:24:de:99:87:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:67:73:27:6C:BF:BB:DD:F8:00:06:7A:FB:2D:5A:4B:64:23:8F:E1
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:79:7f:6b:08:4f:1b:11:7d:bf:09:37:eb:d9:93:01:be:c8:
         ef:df:9d:c9:18:b3:1b:29:1a:c3:6d:37:54:7e:ff:e4:d8:41:
         fe:20:d6:80:3f:cb:42:1c:f4:a2:0b:e8:63:57:00:e8:6d:3e:
         8c:04:69:1d:e2:ea:32:91:f4:df:a1:f9:e7:9c:35:e7:ce:94:
         8e:85:04:cb:e6:8f:c0:f1:fe:5a:fd:08:3c:10:6f:c2:7f:8a:
         ab:50:59:19:6f:aa:92:12:b5:c7:4d:e2:a8:10:d6:b3:27:0e:
         e3:4e:5d:63:7a:5b:d5:f2:e1:bf:10:19:33:8d:90:91:24:cd:
         70:12:3c:96:66:85:f4:da:ca:21:08:74:b4:ff:a1:bc:46:87:
         81:18:c6:72:c3:53:6a:e0:d0:92:a6:e3:1a:86:3f:4d:fd:c6:
         3d:c9:e4:df:4b:bf:b9:2c:6e:24:50:1b:12:bd:8c:c4:eb:07:
         54:eb:a6:4d:ea:6c:a0:86:a1:83:b6:54:54:9b:ee:0c:32:20:
         7f:8b:87:a7:06:77:db:da:e4:ab:2e:61:fe:91:8e:81:cb:86:
         61:69:e2:07:ef:f0:5a:f5:70:d6:9a:c2:4e:72:68:be:d1:45:
         74:38:b4:54:a7:16:1a:34:a4:59:3a:a8:8c:b0:1f:19:14:5e:
         80:05:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:48:53 2024 by rpki-client on console-ams.rpki-client.org