Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa
File:                     3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa (raw, json)
Hash identifier:          S7/OSmTXbrrHFwEPc2p0wH2rg8Ffv1HG0UixZV1Vjco=
Subject key identifier:   89:DB:8C:BF:94:12:E5:5E:BF:35:D9:7E:34:BB:BF:9C:5E:8F:EA:18
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       7FEE9D0F363C969C44BF98D7D6C19585967453C4
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa
Signing time:             Wed 18 Mar 2026 20:07:29 +0000
ROA not before:           Wed 18 Mar 2026 20:02:29 +0000
ROA not after:            Wed 17 Mar 2027 20:07:29 +0000
asID:                     396097
IP address blocks:        209.237.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ee:9d:0f:36:3c:96:9c:44:bf:98:d7:d6:c1:95:85:96:74:53:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Mar 18 20:02:29 2026 GMT
            Not After : Mar 17 20:07:29 2027 GMT
        Subject: CN=89DB8CBF9412E55EBF35D97E34BBBF9C5E8FEA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:45:49:6f:42:bc:dc:04:e1:5a:ff:4d:2a:22:
                    3c:22:f3:00:72:5c:3d:05:08:47:af:78:ad:a7:15:
                    54:62:43:9d:f8:eb:53:2d:0c:92:69:ec:0a:7f:ed:
                    f5:65:33:22:74:8e:17:be:c9:e8:17:4a:27:85:f2:
                    f3:96:a1:70:54:32:57:3d:e9:22:ff:36:9b:b9:58:
                    42:b5:ed:f6:65:e1:1d:58:00:43:de:85:95:6c:98:
                    1a:3a:c1:b9:0b:16:8d:3f:6b:68:ab:75:ea:aa:fc:
                    9a:be:51:08:b3:ec:d7:49:b8:b2:13:1d:08:d5:85:
                    27:a9:7e:45:75:9d:cd:57:fd:a0:3b:85:2c:8f:2c:
                    b5:cf:99:2b:f0:b1:77:fb:d9:91:7e:91:45:bd:af:
                    de:24:2e:a1:d9:92:a4:e9:0c:4e:5f:53:96:8e:b9:
                    24:b1:0f:75:ef:23:ac:98:e2:b9:1c:18:61:36:81:
                    65:39:63:3c:48:69:ba:cd:65:c7:30:cd:94:f9:02:
                    8a:3d:70:db:6c:fe:1c:85:55:9c:c8:fd:85:04:bc:
                    c1:a3:c9:e9:e4:f1:d5:b3:5f:e3:28:3e:37:84:a1:
                    d1:c7:48:00:fb:f9:76:a0:7c:cb:68:8c:98:03:02:
                    66:47:47:1c:ea:e0:64:1b:80:dc:df:9d:f6:6b:40:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:8C:BF:94:12:E5:5E:BF:35:D9:7E:34:BB:BF:9C:5E:8F:EA:18
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/3230392e3233372e3135362e302f32322d3232203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:8f:81:13:90:09:4e:3e:cc:0e:e3:79:3c:8f:df:18:b4:3c:
         c7:e2:60:2f:9f:29:2e:d1:29:7b:6d:43:2c:7d:8f:1a:f4:bb:
         9e:50:6f:ba:0a:09:45:7a:86:70:5c:e8:67:52:ce:38:f6:93:
         76:ba:13:ec:5c:14:a5:c0:71:e3:5d:7a:f9:e9:d0:2c:57:cd:
         38:d6:13:dc:80:b4:16:30:2e:ef:d2:d8:22:17:4e:36:5b:70:
         ca:9c:c4:83:c0:26:20:c3:dd:f6:92:09:93:cb:e9:fc:30:62:
         a0:0d:73:1a:2d:66:c2:39:dc:a6:55:40:b9:01:41:c7:eb:57:
         f7:1e:e2:eb:d9:59:9a:f3:3d:40:af:0a:ad:ad:30:42:d6:c6:
         c5:06:fa:d4:a7:48:72:7f:88:34:c8:13:f3:4c:f6:f9:df:a1:
         b4:18:6d:e3:2f:47:73:fd:c7:1f:a5:dd:21:2f:a0:3a:ce:f8:
         80:87:eb:b8:f7:65:3e:d5:29:4d:a5:87:6a:ad:62:6e:d4:ef:
         73:92:e6:80:0b:d8:28:3d:ad:23:ca:2c:8d:bc:2c:c3:1f:a2:
         cd:69:73:72:b3:ad:35:64:f2:fa:56:2e:8b:5e:31:27:7e:9f:
         1e:d6:e1:8a:a4:df:d0:45:0e:8d:48:69:c3:07:f3:4e:fc:35:
         cf:63:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:03 2026 by rpki-client