Autonomous System Provider Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa
File:                     5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa (raw, json)
Hash identifier:          s25yLaks3OXBzJcW3ZgvlLDiPUpyZbQk2jDHaPDgn1w=
Subject key identifier:   E6:6F:34:7F:06:30:B3:FD:C5:88:50:FB:26:24:23:02:A6:75:45:84
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       A1C7752FF8B1D2E01F
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa
Signing time:             Wed 07 Jun 2023 09:08:41 +0000
ASPA not before:          Wed 07 Jun 2023 09:08:14 +0000
ASPA not after:           Thu 06 Jun 2024 09:08:14 +0000
Customer ASID:            15562
Providers:                AS: 2914
                          AS: 8283
                          AS: 51088
                          AS: 206238

Validation:               OK
Signature path:           rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
                          rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jul 2023 03:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:c7:75:2f:f8:b1:d2:e0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Jun  7 09:08:14 2023 GMT
            Not After : Jun  6 09:08:14 2024 GMT
        Subject: CN=1686128003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8b:04:10:5e:8c:6f:a4:61:8f:b5:b7:e5:6f:
                    45:f2:f4:fd:3a:71:a9:32:8a:49:0c:bf:72:d3:94:
                    e6:b3:8f:62:43:98:67:64:a5:e2:69:b9:b0:3c:a1:
                    27:f5:46:ad:41:4e:0a:95:f7:ff:d9:79:05:5e:b8:
                    e7:98:67:00:fe:36:f9:0b:fd:b6:26:53:35:59:16:
                    5c:15:f2:b0:25:71:96:05:ff:47:5b:6a:a5:cf:d2:
                    93:29:3d:3b:be:41:45:a7:cf:87:e8:d4:ee:30:f5:
                    ff:9e:e1:05:14:c9:60:59:55:7f:75:2e:71:e6:08:
                    c5:b8:69:a1:06:95:e2:2a:12:22:34:08:53:a8:57:
                    57:43:02:68:23:70:42:9e:0b:78:1b:8a:cb:86:ed:
                    33:1e:c0:07:f7:f1:25:b3:85:d6:93:9e:c7:a0:a4:
                    9c:8f:69:8a:02:81:cc:5a:b2:c9:c4:2f:41:46:2a:
                    95:5d:f6:7b:c4:06:ee:60:39:eb:1c:5b:86:a5:92:
                    a9:f8:10:81:e2:65:49:21:3f:da:e4:b9:d4:1f:f9:
                    29:e8:38:a1:e7:cd:f7:15:b5:99:d0:0b:bd:a4:aa:
                    94:05:80:fb:27:44:13:fc:b1:aa:bc:74:93:5f:4c:
                    d2:f7:11:ab:e7:3d:ef:83:c8:25:09:e7:28:00:e2:
                    32:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Key Identifier:
                E6:6F:34:7F:06:30:B3:FD:C5:88:50:FB:26:24:23:02:A6:75:45:84
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15562

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa

    Signature Algorithm: sha256WithRSAEncryption
         33:00:f6:09:b2:61:bf:ad:c3:ad:b7:63:48:62:c0:c9:1f:87:
         c5:08:58:12:e5:f1:3c:ee:13:fa:15:d7:e9:55:d6:f3:26:a1:
         93:76:0d:9b:d2:d0:34:c1:18:7c:83:26:8b:12:c4:27:c5:21:
         58:22:07:1c:99:e0:7c:fe:e4:ac:f7:a7:e4:82:8a:ff:96:e1:
         79:b8:ff:62:11:f4:a6:69:77:85:c5:95:db:f3:d2:6f:36:ae:
         d8:da:76:20:fd:a4:fd:a9:12:84:3b:86:9b:ff:42:32:70:58:
         0d:8b:a3:c0:60:49:44:c5:eb:1f:c4:d6:72:21:bc:ba:a6:41:
         33:72:5b:f3:1c:48:8c:93:df:37:2d:7a:48:36:94:95:58:52:
         12:20:31:d3:bb:1c:8d:20:cc:32:98:f2:23:dc:4d:31:9a:f6:
         1c:d0:06:de:6b:d2:3d:6e:91:f8:32:f6:64:67:2c:1e:ae:d6:
         fe:aa:6b:55:4a:22:0c:6c:08:ee:6b:e1:7e:02:96:f4:1e:15:
         d8:60:c7:55:ea:67:66:00:07:47:e1:7c:af:a8:b8:89:39:da:
         02:17:9d:f0:c3:e9:3d:ce:d7:05:3b:dd:b3:43:46:a3:41:3d:
         bd:c1:e9:f1:95:f9:7b:40:b3:32:38:97:34:1c:82:65:b3:d5:
         57:a5:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----