Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3230382e38322e39362e302f32312d3231203d3e20333936303937.roa
File:                     3230382e38322e39362e302f32312d3231203d3e20333936303937.roa (raw, json)
Hash identifier:          OLyyLz27sIR+hwrc922koE9ZlFMvfOsppalz0wdg8wg=
Subject key identifier:   62:09:65:03:21:63:E9:EC:B3:4D:A3:2F:F2:25:81:46:9C:EA:A0:2B
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       43C76AE33ECD125B23E43891553CA14E58F729BD
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230382e38322e39362e302f32312d3231203d3e20333936303937.roa
Signing time:             Wed 16 Apr 2025 19:49:07 +0000
ROA not before:           Wed 16 Apr 2025 19:44:07 +0000
ROA not after:            Wed 15 Apr 2026 19:49:07 +0000
asID:                     396097
IP address blocks:        208.82.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c7:6a:e3:3e:cd:12:5b:23:e4:38:91:55:3c:a1:4e:58:f7:29:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Apr 16 19:44:07 2025 GMT
            Not After : Apr 15 19:49:07 2026 GMT
        Subject: CN=620965032163E9ECB34DA32FF22581469CEAA02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:fb:7a:eb:75:ad:c1:7f:5a:9f:22:cb:f1:
                    23:6b:72:87:58:8c:3a:b0:11:5a:11:79:3c:b4:41:
                    87:1a:45:2a:b6:76:f0:9d:c2:fe:79:aa:7c:f9:72:
                    51:f4:10:5d:6f:23:11:08:55:04:a4:97:54:2b:d7:
                    2f:92:bc:d1:c9:db:d9:cd:53:56:37:27:c7:d0:e3:
                    f0:92:88:ba:37:19:82:e9:f8:12:a4:fc:55:73:27:
                    9d:57:1f:2d:81:d4:e4:cc:02:9f:50:59:7c:af:84:
                    b7:a6:bb:e7:3e:02:07:9e:06:17:5c:d2:21:d9:67:
                    94:9d:bf:7f:c2:cf:20:ea:28:ea:b1:60:04:d2:c5:
                    63:16:5c:5f:c2:9d:b4:fb:3f:19:fc:24:37:41:e4:
                    92:28:f5:62:18:b1:f1:19:0a:be:04:75:af:98:69:
                    0d:49:66:15:bf:38:04:da:3c:77:de:5e:eb:e3:b9:
                    25:6d:4a:76:33:79:e4:d1:d3:1a:ee:7d:b1:e9:f3:
                    90:0f:a2:bb:fe:34:94:b0:f7:83:e4:4b:fc:ea:c8:
                    aa:cc:ac:2d:a0:e2:5e:61:7e:81:2d:98:51:54:59:
                    e6:92:5b:d2:22:f5:58:7a:c6:36:b6:50:4a:67:e5:
                    fe:4b:55:74:0e:f9:1e:76:4f:6f:ba:8f:59:2e:d1:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:65:03:21:63:E9:EC:B3:4D:A3:2F:F2:25:81:46:9C:EA:A0:2B
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230382e38322e39362e302f32312d3231203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:58:a8:1b:5f:9e:f5:17:52:9d:6b:64:7b:05:02:40:04:
         53:34:10:a8:f2:88:24:f3:50:bb:09:38:4f:89:c5:90:00:95:
         bf:55:4a:92:da:fd:36:96:f1:c6:e5:af:1e:49:d2:0c:4a:5b:
         6a:64:19:89:a6:50:80:65:8e:34:43:22:d8:69:f8:89:21:21:
         61:d4:a5:68:38:c3:e4:8c:b3:2c:09:3b:a9:29:62:4d:85:3c:
         62:32:fb:0f:f9:15:fc:8a:73:88:b5:98:ab:f5:55:0f:fd:d6:
         6c:8b:5c:8a:3e:5e:cf:2a:55:6e:4a:bd:bd:b9:6a:0c:1a:94:
         38:74:56:14:e9:42:b8:61:82:e2:c4:ad:f3:6a:4c:a7:75:c5:
         f7:72:b6:7a:80:c3:c0:a1:3f:59:3b:8b:3d:19:27:f4:96:e2:
         ac:d0:62:4d:7d:2f:e2:4e:65:9b:f0:08:22:72:d5:a8:fc:70:
         1b:91:67:0b:7b:e7:76:33:76:56:c2:72:38:7a:cf:f3:3b:1e:
         d2:d0:5f:e0:a2:fa:53:6c:28:e2:cd:98:dd:ad:2d:cb:c5:1a:
         d2:da:89:df:74:54:8e:a0:5b:c3:c1:46:08:35:76:d2:07:d2:
         5c:25:29:34:94:af:c9:62:63:31:1a:b5:0f:85:1e:c3:64:39:
         4e:d9:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:41:37 2025 by rpki-client