Autonomous System Provider Authorization

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
File:                     AS21957.asa (raw, json)
Hash identifier:          N1Y1Whlk6zz8tptuQ59a6/lJkYYvYae83hANXFayAsg=
Subject key identifier:   0B:F2:6D:CC:52:50:89:6E:0D:02:9B:E6:8C:C8:57:FF:AE:0F:30:71
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       5B4F2896263061AE5E5F425110ECEAE73E0E8812
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
Signing time:             Mon 10 Apr 2023 06:24:39 +0000
ASPA not before:          Mon 10 Apr 2023 06:19:39 +0000
ASPA not after:           Mon 08 Apr 2024 06:24:39 +0000
Customer ASID:            21957
Provider set:             AS: 970

Validation:               OK
Signature path:           rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 May 2023 11:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4f:28:96:26:30:61:ae:5e:5f:42:51:10:ec:ea:e7:3e:0e:88:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Apr 10 06:19:39 2023 GMT
            Not After : Apr  8 06:24:39 2024 GMT
        Subject: CN=0BF26DCC5250896E0D029BE68CC857FFAE0F3071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:e4:ec:8a:79:ce:7c:23:c3:f4:f1:34:fb:
                    64:0b:a4:f1:d2:fe:55:78:51:0d:92:24:78:e8:ca:
                    8f:ee:b7:5a:d6:9b:ad:a3:3b:c7:0d:73:d3:07:ef:
                    8d:16:8d:97:fa:6a:78:24:b1:32:14:cd:2e:b3:f8:
                    ec:e3:0b:c9:1b:22:69:f2:ea:31:44:16:40:d2:5e:
                    6b:c6:89:af:79:3d:e6:12:9f:06:a4:0c:41:08:bd:
                    43:1b:f8:f7:81:77:cd:a9:e2:44:82:bf:a2:32:23:
                    c0:ff:d9:7b:a6:94:bb:e7:1a:13:9e:99:bf:03:e2:
                    34:5c:e7:e5:b8:ea:3f:d2:ab:e9:22:75:a8:62:d7:
                    f7:42:f6:e5:ad:81:a4:f5:44:1a:02:4a:bd:67:04:
                    8e:a3:d9:ee:c3:d6:4c:83:a1:3c:82:38:46:a4:ff:
                    75:d7:4e:18:92:c8:ed:c6:78:aa:2d:29:62:77:99:
                    b4:d1:11:17:08:4f:43:5a:5b:05:fc:8e:df:9b:68:
                    c6:fc:dd:ec:f2:7c:d6:40:c1:f5:86:bb:aa:ba:d8:
                    68:c6:7a:0d:39:81:ef:89:24:c8:a2:19:fe:22:cb:
                    81:08:ac:23:9d:59:f4:ac:f6:3c:3c:ee:1b:36:06:
                    10:26:3e:4c:58:60:56:e0:64:32:31:ef:46:be:3f:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:F2:6D:CC:52:50:89:6E:0D:02:9B:E6:8C:C8:57:FF:AE:0F:30:71
            X509v3 Authority Key Identifier: 
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21957

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:17:37:10:db:4d:37:a3:87:91:0d:9b:8c:78:97:32:66:
         8a:c5:d2:88:83:1d:26:0e:83:35:61:fd:25:24:6d:fe:a0:24:
         4f:cb:99:5e:a5:1a:cf:9f:19:97:2e:76:17:f8:ba:25:51:9a:
         cf:1c:5f:0e:60:dd:d0:a7:88:fe:30:7f:ad:5b:e4:d5:76:e5:
         38:bc:b7:16:d7:99:91:95:88:4f:4c:79:97:c7:74:cc:09:e4:
         1e:c3:26:68:78:60:5f:98:63:64:20:80:21:19:22:c2:17:d0:
         5b:6b:74:5d:72:c2:44:96:1b:a1:c1:28:9a:9f:f8:60:6f:84:
         0d:55:03:ff:c5:9d:a7:0d:34:60:64:ac:60:68:cd:3e:ed:57:
         87:d3:ac:4e:7a:96:2d:ad:ab:db:0a:a2:12:08:77:a9:be:2e:
         71:8a:e2:4f:4f:bf:d4:c7:ed:86:a1:b6:71:73:da:12:9b:90:
         95:cf:0d:b3:4f:3e:9f:22:67:f5:e3:86:0d:b8:f8:20:1d:83:
         c0:cd:ca:9e:9c:8f:76:47:c7:93:77:40:da:9d:96:02:10:75:
         2f:04:fa:27:8a:d0:3b:40:39:6e:7c:38:03:16:4c:94:37:b5:
         62:9c:e7:ce:e1:f3:75:6d:4f:7c:c2:40:13:4d:d8:ce:97:8d:
         f3:a8:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 13:06:20 2023 by rpki-client on console-ams.rpki-client.org