Autonomous System Provider Authorization

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
File:                     AS21957.asa (raw, json)
Hash identifier:          v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=
Subject key identifier:   2E:92:84:25:BB:E8:B5:1B:92:41:4D:3D:34:25:EE:9A:AB:35:45:7F
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       5C3130C34A4183F9730E200F901A8F293F8114D9
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
Signing time:             Sat 28 Sep 2024 19:50:53 +0000
ASPA not before:          Sat 28 Sep 2024 19:45:53 +0000
ASPA not after:           Sat 27 Sep 2025 19:50:53 +0000
Customer ASID:            21957
Providers:                AS: 970

Validation:               OK
Signature path:           rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Nov 2024 19:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:31:30:c3:4a:41:83:f9:73:0e:20:0f:90:1a:8f:29:3f:81:14:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Sep 28 19:45:53 2024 GMT
            Not After : Sep 27 19:50:53 2025 GMT
        Subject: CN=2E928425BBE8B51B92414D3D3425EE9AAB35457F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:8f:4b:bb:a8:cc:50:b8:d8:35:da:7a:b1:
                    b6:c9:98:66:06:22:32:9f:ee:2a:37:c4:85:0f:f6:
                    fd:fb:9a:43:16:69:f9:9d:82:a1:f9:a7:d8:36:f6:
                    8d:db:cd:6f:49:ac:4e:59:0d:12:ca:e6:07:70:cd:
                    1b:ab:b1:f1:8e:8d:23:f6:6a:ab:bf:c4:37:a0:01:
                    7c:e1:3b:a8:23:e1:d8:f6:f8:ea:8b:be:e4:60:6c:
                    bf:4d:a7:14:41:ae:8b:5f:d1:6a:60:b7:cc:95:68:
                    a7:7c:42:23:6d:1e:e5:7e:4a:d4:a2:a7:ed:62:85:
                    7b:4c:de:97:6b:b4:f9:ac:64:a8:2b:6a:6e:b0:4e:
                    53:fe:c7:78:1b:70:53:3e:f3:e4:c8:47:9d:ec:f1:
                    5a:72:d7:b8:04:bb:c8:75:3e:ea:65:d5:8f:8f:9e:
                    de:a1:c7:26:84:42:77:ec:92:f4:f5:d5:87:e1:ea:
                    f6:23:b5:fa:fc:2b:61:23:31:07:3b:46:15:bf:46:
                    f7:99:6b:f7:90:b2:14:7e:8c:75:f5:48:41:62:56:
                    ce:72:94:4d:6f:69:75:d2:e1:09:78:0d:5f:7b:c8:
                    c4:c7:45:1a:6a:70:aa:38:d7:61:07:41:3f:7d:3c:
                    90:a1:83:ef:7d:a1:20:b3:82:b8:f6:0c:34:83:cd:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:84:25:BB:E8:B5:1B:92:41:4D:3D:34:25:EE:9A:AB:35:45:7F
            X509v3 Authority Key Identifier:
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21957

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:8c:41:41:9c:b4:a4:eb:fd:2d:8d:a7:4a:61:58:ab:de:
         62:7e:9b:2f:ff:02:0c:df:34:5f:d7:66:9b:97:31:ab:66:99:
         ef:20:2a:2c:4b:68:36:1f:fd:92:16:0f:ec:24:2d:99:7f:80:
         cc:28:80:e6:b0:c2:1e:7a:39:a8:bb:82:85:47:de:e4:e2:e7:
         37:72:b3:7a:69:7e:ab:96:78:27:60:98:e4:2b:5e:c7:05:3f:
         11:59:d2:76:98:51:04:6e:8b:7b:fe:98:ab:42:93:70:5b:57:
         3e:50:dc:86:24:4c:b6:2c:c4:55:cd:9c:d8:dd:bb:b8:db:b3:
         e7:1d:8e:18:d7:2d:6a:a5:3f:cc:48:8c:be:19:81:ba:01:41:
         75:79:47:7c:f2:a9:62:b7:20:d6:9b:48:d9:54:e8:b6:08:b5:
         79:1c:21:52:33:ad:a4:15:f5:b1:54:75:33:f9:83:f1:1a:cf:
         c6:2d:3b:0d:77:b8:c3:4a:08:14:72:6c:53:44:0b:e3:15:e0:
         bf:d4:21:a7:32:66:52:10:95:37:8b:df:ad:f5:16:e5:d4:87:
         78:d8:44:1f:47:3e:f9:8a:76:1b:30:d8:7b:3a:b0:9a:e2:6a:
         9e:d1:89:b3:70:d2:56:94:07:62:11:2c:fd:f7:3e:69:02:51:
         44:2d:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org