Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/36342e3138362e392e302f32342d3234203d3e20333936303937.roa
File:                     36342e3138362e392e302f32342d3234203d3e20333936303937.roa (raw, json)
Hash identifier:          Ui/CW5YCnPMAcZ1TIw/g8YbN6CAtQib9e/HfuM9n8r8=
Subject key identifier:   DB:F4:24:A3:92:E7:D2:FA:E2:64:E2:C7:F6:7D:5D:86:CA:C0:36:01
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       24A85F583ABE4E0753D0091358D1918741A81401
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/36342e3138362e392e302f32342d3234203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:08 +0000
ROA not before:           Wed 16 Apr 2025 19:44:08 +0000
ROA not after:            Wed 15 Apr 2026 19:49:08 +0000
asID:                     396097
IP address blocks:        64.186.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a8:5f:58:3a:be:4e:07:53:d0:09:13:58:d1:91:87:41:a8:14:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:08 2025 GMT
            Not After : Apr 15 19:49:08 2026 GMT
        Subject: CN=DBF424A392E7D2FAE264E2C7F67D5D86CAC03601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:c8:d0:31:77:37:eb:93:59:22:bf:37:8b:
                    40:20:b5:81:97:56:55:09:d6:29:2d:56:16:e7:4b:
                    92:be:8c:5a:19:0e:67:82:a7:d5:9e:3b:61:71:f5:
                    eb:51:f8:5f:0d:63:5e:15:ee:bf:af:de:0e:36:12:
                    94:32:b4:9b:08:dc:db:77:a5:4b:c5:3a:34:33:fc:
                    7d:52:cf:3b:69:5b:e4:8e:62:b6:a4:22:5a:75:4f:
                    bd:d3:3e:1f:6c:3b:e7:1a:48:8b:2f:2d:63:0f:14:
                    2f:fe:7f:81:1c:31:20:0d:b3:3c:5d:f6:2d:61:11:
                    54:f2:be:49:69:b6:97:52:4c:7a:7c:f7:5d:f5:5b:
                    12:eb:ce:e6:d6:28:ae:b1:40:db:44:19:e0:f1:d8:
                    e1:6a:93:44:5c:6c:ea:14:f8:7d:c5:32:af:8d:96:
                    93:54:a2:c7:bd:6b:10:79:5a:07:30:e7:f8:d8:fd:
                    5f:b7:c3:36:0c:e7:2e:00:44:24:f0:c4:f3:8c:be:
                    41:b2:cc:19:45:6e:59:93:fa:63:d3:f2:f6:9d:1e:
                    36:7b:ae:18:c6:56:96:16:85:55:e4:db:91:fd:df:
                    e5:2c:7b:8b:52:61:7e:30:de:db:bb:18:02:5e:33:
                    b5:e8:1b:d5:d1:a6:5b:7c:5b:09:2d:a0:3a:04:97:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F4:24:A3:92:E7:D2:FA:E2:64:E2:C7:F6:7D:5D:86:CA:C0:36:01
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/36342e3138362e392e302f32342d3234203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:7e:ef:d1:81:a4:ae:e0:7b:b5:11:31:f8:1e:23:37:de:
         91:34:b3:2f:fc:8e:5b:01:a3:69:bd:a2:84:d7:9a:99:e3:04:
         39:e0:27:dd:92:d9:44:c5:c0:b5:57:f5:2a:eb:fb:ce:67:1a:
         5e:ca:8e:57:71:fc:95:d3:81:96:27:bc:0f:30:4f:06:b8:52:
         eb:b8:0e:b0:f0:45:42:46:73:79:ce:55:07:09:77:a9:d2:20:
         37:a1:ab:c2:48:e8:59:1a:51:b0:3a:80:17:30:82:6c:36:09:
         e5:20:5a:7a:c3:c3:b4:e2:8b:63:a1:f0:63:f5:57:61:60:b4:
         a6:02:6f:28:20:7b:d4:ed:9a:4e:7d:4f:66:11:ab:ee:4a:ab:
         a5:c1:3e:9a:54:05:da:e2:7e:a5:da:f7:22:1b:2d:8a:fc:60:
         b7:b2:d0:b0:f9:e6:b1:f0:70:b8:b3:8c:ad:aa:ac:de:71:dd:
         a4:ba:48:e7:16:1a:75:4f:75:ab:f2:47:25:87:78:b2:b7:c7:
         b3:76:1c:9f:37:88:e9:53:4c:a2:8c:55:06:51:36:5a:04:11:
         a7:a3:2d:e8:60:17:9e:55:e5:c7:69:98:77:7b:45:ae:d8:46:
         f0:59:5d:44:34:3b:c7:ea:70:3a:3b:91:5d:ef:a6:70:fd:e5:
         12:e8:75:ce
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUJKhfWDq+TgdT0AkTWNGRh0GoFAEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFhYTAx
MjVlNzY3NTVhNzg1NjNjODYwHhcNMjUwNDE2MTk0NDA4WhcNMjYwNDE1MTk0OTA4
WjAzMTEwLwYDVQQDEyhEQkY0MjRBMzkyRTdEMkZBRTI2NEUyQzdGNjdENUQ4NkNB
QzAzNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDLI0DF3N+uT
WSK/N4tAILWBl1ZVCdYpLVYW50uSvoxaGQ5ngqfVnjthcfXrUfhfDWNeFe6/r94O
NhKUMrSbCNzbd6VLxTo0M/x9Us87aVvkjmK2pCJadU+90z4fbDvnGkiLLy1jDxQv
/n+BHDEgDbM8XfYtYRFU8r5JabaXUkx6fPdd9VsS687m1iiusUDbRBng8djhapNE
XGzqFPh9xTKvjZaTVKLHvWsQeVoHMOf42P1ft8M2DOcuAEQk8MTzjL5BsswZRW5Z
k/pj0/L2nR42e64YxlaWFoVV5NuR/d/lLHuLUmF+MN7buxgCXjO16BvV0aZbfFsJ
LaA6BJdZGQIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFNv0JKOS59L64mTix/Z9XYbK
wDYBMB8GA1UdIwQYMBaAFN/FUJdo6lh+Y40gaAAy4P8SK9JaMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuc2FpbHguY28vcmVw
by9TYWlsLUludGVybmV0LUluYy8wL0RGQzU1MDk3NjhFQTU4N0U2MzhEMjA2ODAw
MzJFMEZGMTIyQkQyNUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0
LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYmM0YmY1YS0xZDA2LTRhM2Yt
OTcwNi1hMThmYTJkODY3MGMvZmI2OTFhOTQwMzE1ZjZiNTk3Mjg5NDY4ZWRmNzFh
YTAxMjVlNzY3NTVhNzg1NjNjODYuY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYB
BQUHMAuGZ3JzeW5jOi8vcnBraS5zYWlseC5jby9yZXBvL1NhaWwtSW50ZXJuZXQt
SW5jLzAvMzYzNDJlMzEzODM2MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMz
MzkzNjMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAEC6CTANBgkqhkiG9w0BAQsFAAOCAQEAVht+
79GBpK7ge7URMfgeIzfekTSzL/yOWwGjab2ihNeameMEOeAn3ZLZRMXAtVf1Kuv7
zmcaXsqOV3H8ldOBlie8DzBPBrhS67gOsPBFQkZzec5VBwl3qdIgN6GrwkjoWRpR
sDqAFzCCbDYJ5SBaesPDtOKLY6HwY/VXYWC0pgJvKCB71O2aTn1PZhGr7kqrpcE+
mlQF2uJ+pdr3Ihstivxgt7LQsPnmsfBwuLOMraqs3nHdpLpI5xYadU91q/JHJYd4
srfHs3YcnzeI6VNMooxVBlE2WgQRp6Mt6GAXnlXlx2mYd3tFrthG8FldRDQ7x+pw
OjuRXe+mcP3lEuh1zg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:38:12 2025 by rpki-client