Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/AS214768.asa
File:                     AS214768.asa (raw, json)
Hash identifier:          jXPXFYdvxRTO4xZ1QtAhRs/urzNWFCHEnbmEMExacrU=
Subject key identifier:   5B:51:24:69:56:DE:6E:A9:C7:00:18:49:07:D0:26:15:7D:8E:B1:80
Certificate issuer:       /CN=e84b072599a643fe71f171b15ed724213d43ce5b
Certificate serial:       2BB6C694660C16AD6DF707E3124A197BAA3DE206
Authority key identifier: E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/AS214768.asa
Signing time:             Mon 14 Jul 2025 00:06:31 +0000
ASPA not before:          Mon 14 Jul 2025 00:01:31 +0000
ASPA not after:           Mon 13 Jul 2026 00:06:31 +0000
Customer ASID:            214768
Providers:                AS: 6939
                          AS: 52025
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b6:c6:94:66:0c:16:ad:6d:f7:07:e3:12:4a:19:7b:aa:3d:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84b072599a643fe71f171b15ed724213d43ce5b
        Validity
            Not Before: Jul 14 00:01:31 2025 GMT
            Not After : Jul 13 00:06:31 2026 GMT
        Subject: CN=5B51246956DE6EA9C700184907D026157D8EB180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:80:dc:1c:98:75:c0:c5:3b:5b:5a:4e:d8:
                    35:75:91:b2:46:d3:56:43:3c:1b:19:f6:62:11:04:
                    d7:70:b8:6d:7b:f3:bc:aa:db:6c:5d:d8:04:3e:77:
                    c5:97:8a:44:8f:12:6d:c6:ae:8f:40:af:96:b5:bf:
                    3a:37:4e:c2:63:3f:26:c8:6d:f9:05:f7:8a:b1:b0:
                    49:b0:bd:73:78:64:08:d1:a2:05:10:74:f4:c4:f3:
                    36:7b:5e:da:70:59:c0:c0:cd:9a:d5:fc:b8:47:34:
                    37:75:60:73:01:09:f1:fc:2d:39:06:63:5c:fa:13:
                    fa:51:4c:fd:da:dc:16:63:bf:3b:6d:9d:87:1a:1b:
                    2c:70:88:23:08:45:a6:e9:c0:40:1a:07:76:65:a9:
                    a4:57:e6:07:67:40:24:b1:83:fd:e9:62:e0:49:96:
                    08:f3:7f:cb:49:1d:13:dc:1e:17:41:a1:cd:16:6b:
                    5b:b8:4a:4e:d7:92:6c:b6:7e:10:f0:bb:10:3e:b7:
                    99:a6:20:a7:1c:aa:94:ba:1a:d8:ab:eb:a4:80:bf:
                    bc:f1:df:a8:01:c1:45:e9:44:fb:8f:91:80:f3:b0:
                    14:c9:86:68:e0:56:2d:77:03:12:ce:d6:4d:ab:28:
                    3c:95:cc:86:c7:a1:b9:e4:90:ea:0e:f2:2f:6c:a2:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:24:69:56:DE:6E:A9:C7:00:18:49:07:D0:26:15:7D:8E:B1:80
            X509v3 Authority Key Identifier:
                keyid:E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/AS214768.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214768

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:57:41:1f:d3:75:f3:16:ab:7d:5b:f8:e5:ea:d9:a7:66:
         e8:62:83:cd:0c:71:3a:a2:53:68:b6:1c:f4:95:59:a4:4e:56:
         a7:9c:13:cd:34:bf:48:cc:12:4b:9f:af:7a:be:2b:42:09:92:
         93:69:de:b3:67:3e:ce:30:c2:84:3f:43:f6:21:c2:60:a5:f4:
         2f:12:fd:b9:da:5d:e3:ee:88:06:cf:06:8d:6d:62:4d:c0:5c:
         9f:1e:7d:0b:7b:12:dd:4d:0d:ef:a1:e4:39:8d:52:bc:07:87:
         00:e2:94:e8:14:f7:ec:f0:d9:cd:fd:b5:bc:44:5b:69:98:b5:
         99:e5:1a:1b:35:da:cd:29:3d:8e:bf:92:82:29:5a:09:08:9c:
         22:d0:25:27:0b:48:e7:e7:9d:ef:e4:1d:73:5e:50:e1:d0:2b:
         22:56:4f:68:f7:0f:39:b2:65:c5:cf:12:5b:d7:f6:20:f6:a9:
         4b:cf:8c:40:f4:68:66:f4:b6:cd:3e:fd:a1:76:ea:02:45:19:
         1d:e5:43:25:d7:d2:34:35:b6:ef:dc:92:f1:7a:a1:2b:c3:1d:
         65:ae:30:fb:0f:2d:66:8c:40:2e:19:af:c5:8c:7b:64:39:21:
         80:81:b6:f7:77:54:f1:e2:3f:da:7a:b0:f1:1d:ac:1a:91:11:
         4d:4b:50:e5
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUK7bGlGYMFq1t9wfjEkoZe6o94gYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTg0YjA3MjU5OWE2NDNmZTcxZjE3MWIxNWVkNzI0MjEz
ZDQzY2U1YjAeFw0yNTA3MTQwMDAxMzFaFw0yNjA3MTMwMDA2MzFaMDMxMTAvBgNV
BAMTKDVCNTEyNDY5NTZERTZFQTlDNzAwMTg0OTA3RDAyNjE1N0Q4RUIxODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfoDcHJh1wMU7W1pO2DV1kbJG
01ZDPBsZ9mIRBNdwuG1787yq22xd2AQ+d8WXikSPEm3Gro9Ar5a1vzo3TsJjPybI
bfkF94qxsEmwvXN4ZAjRogUQdPTE8zZ7XtpwWcDAzZrV/LhHNDd1YHMBCfH8LTkG
Y1z6E/pRTP3a3BZjvzttnYcaGyxwiCMIRabpwEAaB3ZlqaRX5gdnQCSxg/3pYuBJ
lgjzf8tJHRPcHhdBoc0Wa1u4Sk7Xkmy2fhDwuxA+t5mmIKccqpS6Gtir66SAv7zx
36gBwUXpRPuPkYDzsBTJhmjgVi13AxLO1k2rKDyVzIbHobnkkOoO8i9sojJnAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUW1EkaVbebqnHABhJB9AmFX2OsYAwHwYDVR0j
BBgwFoAU6EsHJZmmQ/5x8XGxXtckIT1DzlswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvMDFmMmJhY2NjNTU3NDBkM2E0YTI4MjRiN2VmZDU4YTIvMS9FODRCMDcyNTk5
QTY0M0ZFNzFGMTcxQjE1RUQ3MjQyMTNENDNDRTVCLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNkVzSEpabW1RXzV4OFhHeFh0Y2tJVDFEemxzLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS8wMWYyYmFjY2M1NTc0MGQzYTRhMjgyNGI3ZWZkNThhMi8xL0FT
MjE0NzY4LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwNG8DANBgkqhkiG9w0BAQsFAAOCAQEAOCpXQR/TdfMWq31b
+OXq2adm6GKDzQxxOqJTaLYc9JVZpE5Wp5wTzTS/SMwSS5+ver4rQgmSk2nes2c+
zjDChD9D9iHCYKX0LxL9udpd4+6IBs8GjW1iTcBcnx59C3sS3U0N76HkOY1SvAeH
AOKU6BT37PDZzf21vERbaZi1meUaGzXazSk9jr+SgilaCQicItAlJwtI5+ed7+Qd
c15Q4dArIlZPaPcPObJlxc8SW9f2IPapS8+MQPRoZvS2zT79oXbqAkUZHeVDJdfS
NDW279yS8XqhK8MdZa4w+w8tZoxALhmvxYx7ZDkhgIG293dU8eI/2nqw8R2sGpER
TUtQ5Q==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:08 2025 by rpki-client