Autonomous System Provider Authorization

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
File:                     AS21957.asa (raw, json)
Hash identifier:          faF7+8kBApl5YlYOGr9e511kueO4rxaKjvlL8v1gaa8=
Subject key identifier:   44:B6:C5:A1:8B:7B:A1:CD:0C:DD:95:60:0C:98:DD:47:05:E4:95:E6
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       2B591E03E301568513D7D60676C1EEBC5B062AB0
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
Signing time:             Sat 28 Oct 2023 19:09:56 +0000
ASPA not before:          Sat 28 Oct 2023 19:04:56 +0000
ASPA not after:           Sat 26 Oct 2024 19:09:56 +0000
Customer ASID:            21957
Providers:                AS: 970

Validation:               OK
Signature path:           rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 08:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:59:1e:03:e3:01:56:85:13:d7:d6:06:76:c1:ee:bc:5b:06:2a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Oct 28 19:04:56 2023 GMT
            Not After : Oct 26 19:09:56 2024 GMT
        Subject: CN=44B6C5A18B7BA1CD0CDD95600C98DD4705E495E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:c7:51:35:7b:be:40:45:14:ff:91:56:eb:
                    96:3b:e9:68:37:41:42:16:29:85:c4:f7:5f:98:7f:
                    46:19:16:76:14:86:9d:a6:12:5c:0e:e6:e0:46:d0:
                    41:4c:dc:71:47:8b:a3:8b:3c:61:47:cf:5f:60:e2:
                    e0:7b:11:76:59:bc:fc:a9:cd:bd:ed:f1:5f:bb:b6:
                    69:bd:0d:4f:41:3b:1a:29:63:5a:cf:bf:3b:6a:24:
                    4e:f4:e8:f9:b7:8e:98:3e:9d:fe:77:4d:28:d7:7a:
                    9d:24:85:89:1c:6c:a9:b2:61:d9:4a:78:dd:55:0d:
                    ca:5f:fe:a2:62:73:1d:1f:b9:bb:4f:07:25:9a:d7:
                    a2:47:0a:10:91:59:22:48:0c:a8:5d:2d:41:b7:88:
                    d9:7a:99:c0:97:43:81:75:1a:60:ae:c8:ea:fd:f8:
                    80:10:dd:28:de:86:a7:c4:e4:38:3b:b7:28:3e:ff:
                    c0:a5:6e:69:77:9b:4f:78:96:0d:7b:bc:6d:0a:07:
                    6d:6e:76:eb:16:6e:25:4d:34:d6:76:c2:f3:e8:21:
                    7d:ea:37:61:e9:32:74:5e:d3:a3:90:b8:b5:7e:ac:
                    4f:77:54:5a:bd:16:23:98:96:56:92:b7:ad:fe:32:
                    70:4c:c4:f2:0c:2d:e3:db:26:ca:00:bc:96:1e:a7:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B6:C5:A1:8B:7B:A1:CD:0C:DD:95:60:0C:98:DD:47:05:E4:95:E6
            X509v3 Authority Key Identifier:
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21957

    Signature Algorithm: sha256WithRSAEncryption
         26:a3:59:11:83:8c:90:7d:82:a4:67:c8:44:e4:fc:f1:e0:8b:
         03:2a:86:c0:59:63:3d:87:72:69:98:99:9e:bb:00:22:6a:22:
         16:d0:a3:eb:7d:79:67:7e:c6:d7:60:90:91:d2:70:bd:d9:21:
         26:43:6e:bd:aa:b6:46:3c:c7:39:7d:ac:b9:92:da:a1:c8:9e:
         93:a5:ef:47:0d:89:b1:e8:f7:d7:fb:f4:2d:3b:9f:56:43:e6:
         f8:cd:47:a0:fc:dc:ac:a5:32:f6:76:76:e9:2d:23:5c:c9:c2:
         a6:62:59:3c:32:c0:a7:02:84:e5:05:c6:27:cf:4d:5b:1c:1e:
         16:0c:7a:0a:64:2f:65:e9:1d:c2:7a:a1:75:b2:30:f5:44:56:
         53:8d:21:d6:67:44:c2:44:ab:7f:0d:5c:6d:25:f3:e0:47:df:
         ce:75:39:38:65:9d:b6:bc:9d:f2:0e:7e:7d:d1:5e:f9:2f:2b:
         8e:f8:2b:b1:66:e5:dd:44:26:a7:2a:f4:68:58:41:5e:e7:2a:
         37:8a:74:59:37:dc:3a:3b:3b:52:00:6b:d4:ee:6b:83:40:83:
         a6:b2:c9:fa:02:17:3e:71:89:b6:2a:91:52:4f:65:5a:fb:a4:
         68:34:e3:fc:4d:39:59:a3:8e:8c:bb:cc:16:e0:e9:ce:2d:88:
         f1:b5:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:27 2024 by rpki-client on console-ams.rpki-client.org