Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3134382e35392e35382e302f32332d3233203d3e20333936303937.roa
File:                     3134382e35392e35382e302f32332d3233203d3e20333936303937.roa (raw, json)
Hash identifier:          Jkkjy7NM4HmuAiH/sXsyM77L4ngeJQuexDAlahFMoeY=
Subject key identifier:   7A:88:73:39:EB:AF:9F:7C:78:F5:9D:D5:A1:3A:8B:FA:B1:ED:D7:08
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       661928EB1D2BB2C0883106E16B3587F4BCDC7DB1
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134382e35392e35382e302f32332d3233203d3e20333936303937.roa
Signing time:             Wed 18 Mar 2026 20:07:29 +0000
ROA not before:           Wed 18 Mar 2026 20:02:29 +0000
ROA not after:            Wed 17 Mar 2027 20:07:29 +0000
asID:                     396097
IP address blocks:        148.59.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:19:28:eb:1d:2b:b2:c0:88:31:06:e1:6b:35:87:f4:bc:dc:7d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Mar 18 20:02:29 2026 GMT
            Not After : Mar 17 20:07:29 2027 GMT
        Subject: CN=7A887339EBAF9F7C78F59DD5A13A8BFAB1EDD708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:3a:8f:74:1b:ea:8b:34:9a:2f:35:34:68:
                    0a:5d:c6:75:19:98:63:fc:e0:b7:05:85:f5:24:36:
                    5c:96:44:70:de:44:a1:fe:37:a5:c3:b7:24:d3:71:
                    06:bf:e1:49:98:e9:24:32:0c:cc:a5:d9:d8:60:fc:
                    71:d2:68:b0:0b:d5:71:93:f7:e5:88:2c:d6:78:37:
                    6b:0c:a0:b1:77:b3:18:ac:3d:ef:e2:7b:56:7d:56:
                    61:5e:22:35:34:f3:3b:47:89:8d:76:4c:bf:d3:f5:
                    14:fc:33:d1:38:de:f2:ee:96:c6:2a:b6:7c:53:d6:
                    a0:58:97:cb:e9:c0:1a:53:c4:ed:8e:a6:31:67:0b:
                    9b:a8:cc:26:e7:b5:2c:68:fc:b1:a8:af:f1:d6:56:
                    80:3a:fd:4a:4a:26:c1:af:ba:ce:74:47:98:9f:0f:
                    d2:07:9e:aa:f7:be:71:ed:f9:b2:c1:3f:4e:17:51:
                    2a:77:96:3e:7c:c8:8f:a9:a1:99:c7:2b:88:4c:cb:
                    e5:f3:35:0a:f8:6f:42:04:17:f1:89:72:a4:65:4e:
                    07:40:78:10:9f:12:dc:50:96:66:44:33:f7:ef:a9:
                    e9:91:43:91:e0:d3:c0:68:51:85:17:8d:ff:3d:07:
                    06:f3:26:bd:21:6a:17:7c:89:2b:5c:b9:c3:72:20:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:88:73:39:EB:AF:9F:7C:78:F5:9D:D5:A1:3A:8B:FA:B1:ED:D7:08
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3134382e35392e35382e302f32332d3233203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:f2:f6:ee:4e:f7:01:f4:bf:7e:65:1f:99:46:b8:c5:c5:c6:
         11:f8:ea:91:a5:f6:a6:9f:e6:77:9e:e8:1a:51:25:95:66:e0:
         5d:c7:32:5b:60:97:d1:e2:19:68:ef:5d:b7:eb:05:36:ed:c5:
         09:07:ec:b2:35:5a:45:3d:91:1f:5e:27:49:34:db:00:57:24:
         72:4a:bd:b9:7d:33:42:0d:9e:20:74:e9:67:28:02:39:8f:bd:
         6a:b5:b5:0f:e5:a8:6f:57:c4:b6:e0:72:e2:42:d4:1c:65:3e:
         12:0d:74:a7:83:e9:3d:cd:da:8e:33:28:19:ca:bd:a4:11:77:
         e6:34:c2:9e:cb:a3:79:87:b5:1f:06:e0:af:fd:88:3e:ea:e0:
         34:e5:bd:04:26:76:ad:d6:ab:a5:ba:5a:dc:35:d7:83:12:1f:
         a2:86:79:35:ed:94:04:13:37:5f:39:99:c8:57:c7:88:83:ac:
         6b:a0:ef:8f:31:2f:b2:d4:45:d3:dd:dc:d7:2d:86:9b:9f:09:
         93:4f:21:b9:12:87:5f:8f:db:7e:39:e1:13:bc:e8:34:d9:2a:
         cd:0b:54:ad:dc:34:45:47:29:1b:f4:12:60:c1:ea:c3:a8:1d:
         2b:c4:3e:99:38:a4:cf:b3:b4:4c:22:8f:c4:a6:4a:a8:aa:da:
         f6:2d:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:46 2026 by rpki-client