Route Origin Authorization

$ rpki-client -vvf rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa
File:                     323630343a323163303a3a2f33322d3332203d3e20333936303937.roa (raw, json)
Hash identifier:          3GmbA4YmystZX/DF+UvbkoyDAt/i16yVxMrLZrauk+8=
Subject key identifier:   E5:87:D5:39:77:2E:BC:59:BA:4B:88:C0:62:9A:22:1C:9E:0F:75:33
Certificate issuer:       /CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
Certificate serial:       494B7CD956439BCBB5126A2B857ABBD37EF191D3
Authority key identifier: DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa
Signing time:             Wed 18 Mar 2026 20:07:29 +0000
ROA not before:           Wed 18 Mar 2026 20:02:29 +0000
ROA not after:            Wed 17 Mar 2027 20:07:29 +0000
asID:                     396097
IP address blocks:        2604:21c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:7c:d9:56:43:9b:cb:b5:12:6a:2b:85:7a:bb:d3:7e:f1:91:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Validity
            Not Before: Mar 18 20:02:29 2026 GMT
            Not After : Mar 17 20:07:29 2027 GMT
        Subject: CN=E587D539772EBC59BA4B88C0629A221C9E0F7533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:61:91:1d:59:63:6d:fe:37:82:c4:df:ba:
                    b0:76:8a:00:cb:0e:73:6b:f8:d9:f8:f7:d2:cf:68:
                    1e:bf:a0:d8:a4:37:6e:33:08:62:91:b2:69:e6:8b:
                    1f:50:08:0b:9a:a9:c7:af:a8:ba:76:8a:3b:0d:55:
                    e0:20:72:3b:4a:f9:f4:23:5d:33:3d:bd:d1:82:21:
                    16:76:3f:8a:91:51:0e:28:b8:b2:a3:2e:fa:82:8a:
                    03:72:83:d7:60:43:33:d4:27:47:e9:5f:2e:4b:d0:
                    1b:e4:11:10:97:a6:bb:a6:65:fa:33:e0:f3:ae:0f:
                    a5:b0:29:4f:e1:28:57:4a:e9:48:f9:cb:c3:9b:72:
                    8a:d5:1e:18:42:b2:f2:91:e4:8c:13:fe:ba:6e:47:
                    dd:2a:67:78:c4:88:1c:e0:51:53:9d:e5:90:74:c6:
                    4c:32:9f:3f:d0:ff:b9:36:3a:1a:28:c6:3c:d6:71:
                    65:cf:a3:d8:20:38:8a:b2:6b:06:2c:70:2c:41:08:
                    2d:29:9b:a6:f6:e2:78:da:af:26:e1:e0:ef:77:fc:
                    c8:8f:37:01:c0:36:78:50:8e:90:2c:15:6e:cf:34:
                    83:8d:a1:90:93:d0:80:a5:09:76:3c:fa:4b:1a:73:
                    c2:52:36:0f:60:31:c4:9c:ba:8a:de:4d:a5:8c:06:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:87:D5:39:77:2E:BC:59:BA:4B:88:C0:62:9A:22:1C:9E:0F:75:33
            X509v3 Authority Key Identifier:
                keyid:DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/323630343a323163303a3a2f33322d3332203d3e20333936303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:33:76:2b:ed:55:1d:df:f8:a4:1e:7d:14:2f:b3:17:da:b6:
         e2:c4:cd:af:0f:cc:20:03:ae:b7:b6:f5:70:a2:0e:e6:9c:7e:
         6a:4a:ad:0f:47:06:c8:2e:df:9a:64:6a:aa:c5:07:2b:60:46:
         ff:ba:10:d3:4d:43:30:25:df:a8:15:27:e0:48:38:3d:3e:f0:
         bc:01:b7:d8:47:d1:65:f3:32:92:91:4f:80:53:18:66:10:17:
         a4:02:85:c5:29:8b:f8:59:16:c9:21:64:e5:ad:20:fb:f7:b9:
         3f:27:32:0d:f3:5a:a4:c0:f9:2f:5d:3b:d6:14:4b:c8:92:1b:
         0f:6b:6b:5b:6f:c2:99:9a:64:7d:41:2e:97:88:e1:10:2d:a6:
         14:2f:83:9c:4b:f3:f0:a0:fc:81:37:16:99:40:19:41:fd:4a:
         3c:56:de:19:a9:1f:1b:b1:2b:55:a7:e4:3e:a9:de:95:26:b5:
         dc:86:df:2f:5b:dd:4e:60:9b:3e:1d:88:01:63:d5:e4:81:0e:
         7b:86:1d:42:93:e0:38:ff:7c:d3:db:ec:57:67:ef:da:bb:17:
         27:4a:8e:1d:e3:3a:3c:e0:d7:de:c7:eb:45:1a:c3:81:a7:b5:
         ce:b8:34:8b:0d:93:87:a1:4e:99:53:e7:65:60:e9:6b:2b:a1:
         fc:42:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:50 2026 by rpki-client