Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa
File:                     3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa (raw, json)
Hash identifier:          c/QIPAO6ErpDW6Vcq2zF8BakzeAkoDzWhrVmFEPIbQc=
Subject key identifier:   BE:51:BB:80:68:5A:D6:D5:E3:75:09:E5:56:CA:49:03:58:7E:0A:F3
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       725F958FC622B64A50EB358CF572409C72435B20
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa
Signing time:             Wed 18 Mar 2026 20:07:30 +0000
ROA not before:           Wed 18 Mar 2026 20:02:30 +0000
ROA not after:            Wed 17 Mar 2027 20:07:30 +0000
asID:                     396097
IP address blocks:        172.98.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5f:95:8f:c6:22:b6:4a:50:eb:35:8c:f5:72:40:9c:72:43:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Mar 18 20:02:30 2026 GMT
            Not After : Mar 17 20:07:30 2027 GMT
        Subject: CN=BE51BB80685AD6D5E37509E556CA4903587E0AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:bb:c9:0e:2c:61:ed:73:f0:5f:0c:27:ab:
                    b7:54:ab:f9:28:84:c9:ad:8b:45:0f:67:bc:61:f7:
                    18:4a:8b:33:af:e9:4c:70:32:29:a5:b9:5e:d2:d5:
                    ef:7b:b4:36:70:b5:d0:5f:6c:f6:8e:d8:21:d2:4e:
                    29:1f:c9:fc:c2:c7:39:54:de:48:a6:3b:9c:29:63:
                    32:fb:c1:e5:8b:11:84:8d:3f:70:47:df:6b:06:1e:
                    4e:c9:03:ca:83:e5:96:90:a6:f7:6e:c0:c4:f8:0a:
                    fe:da:c2:cb:27:6f:1f:7d:69:15:df:79:b4:20:a4:
                    41:85:e5:f2:47:6b:73:21:6a:95:fc:32:1f:c6:4e:
                    8a:15:84:31:b0:7d:61:ad:7f:04:18:45:78:55:47:
                    55:76:48:65:8d:07:41:96:d7:a8:86:67:ac:8c:12:
                    1f:44:4c:d3:01:e9:db:21:67:b5:55:88:52:85:0d:
                    db:2b:91:7c:a7:f1:42:21:32:8d:bb:ef:3a:02:6b:
                    b0:70:d2:5e:22:51:83:bf:80:f2:a0:ec:57:50:ee:
                    d0:3b:a2:29:b3:2f:19:03:ae:dd:af:d3:51:6a:0c:
                    2a:41:b6:9f:cb:e0:46:78:99:3d:a9:2c:74:e5:b3:
                    54:e7:a1:00:d6:9a:97:40:9d:11:5d:ab:29:88:d6:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:51:BB:80:68:5A:D6:D5:E3:75:09:E5:56:CA:49:03:58:7E:0A:F3
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3137322e39382e3231362e302f32322d3232203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:8b:9d:55:18:dc:e9:e2:67:ec:ef:13:75:37:4c:15:60:cf:
         db:62:4f:62:62:c8:e1:ab:6a:88:f4:26:64:8a:59:a0:48:3a:
         53:ae:a9:28:31:67:28:d9:0d:bf:28:f6:03:4d:a7:5d:34:92:
         11:8a:8d:78:b5:4c:68:b9:b3:64:26:fa:1d:1b:12:d0:6b:9e:
         e8:44:29:22:48:c1:04:fe:53:29:90:17:c7:59:0e:af:c8:2c:
         9b:4f:a4:c1:40:0b:cb:89:b3:ac:cc:19:43:65:54:57:05:57:
         be:11:04:31:b0:1b:2a:69:de:bb:21:df:6b:2d:cf:35:32:ad:
         ec:da:34:c6:94:25:4b:77:49:c8:bd:e6:45:66:cb:ff:7b:ef:
         ad:a0:02:69:93:6f:11:8d:41:c7:41:dd:89:b6:1c:43:6d:08:
         e1:5c:63:9f:13:df:f1:00:8b:ab:cd:5f:9b:f0:6b:b6:15:29:
         bc:74:d5:85:22:16:98:7a:d0:fe:0d:69:d1:0c:cd:81:df:ce:
         d8:a8:89:f6:d7:2d:7b:63:7c:01:cf:99:bb:d2:d9:47:c5:7c:
         81:4e:61:99:a1:8b:a3:74:3a:35:8d:1f:d0:62:6d:06:bb:a9:
         9f:1c:cc:09:e0:01:bd:f4:ef:63:ae:8c:68:a2:c9:af:9a:c7:
         54:8f:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:21 2026 by rpki-client