Autonomous System Provider Authorization

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa
File:                     AS970.asa (raw, json)
Hash identifier:          jzB2E7kaYrBxVJiGnbS9WFbNqd9sk8sfdsau+W2bmK8=
Subject key identifier:   88:A2:58:CD:AB:AE:EF:9F:3E:F7:80:14:EA:5B:A8:2C:1E:4D:36:5C
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       5B20A483C33A8415586C35CD0AEC957F4467A3B1
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa
Signing time:             Sat 28 Oct 2023 19:09:57 +0000
ASPA not before:          Sat 28 Oct 2023 19:04:57 +0000
ASPA not after:           Sat 26 Oct 2024 19:09:57 +0000
Customer ASID:            970
Providers:                AS: 54874

Validation:               OK
Signature path:           rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 09:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:a4:83:c3:3a:84:15:58:6c:35:cd:0a:ec:95:7f:44:67:a3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Oct 28 19:04:57 2023 GMT
            Not After : Oct 26 19:09:57 2024 GMT
        Subject: CN=88A258CDABAEEF9F3EF78014EA5BA82C1E4D365C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:b5:9f:85:f0:92:97:e1:07:38:ce:ba:61:
                    7c:e0:f9:0b:9d:0f:7a:b7:d3:61:f6:99:6e:57:5b:
                    ef:61:9c:a9:1e:b7:a7:ee:bb:76:11:37:65:a1:95:
                    4e:07:bb:7a:94:61:38:f9:18:62:97:af:55:ff:79:
                    a9:9a:19:d9:e4:f5:15:76:89:60:14:d3:52:06:6b:
                    68:64:c1:4a:0d:d9:8d:23:60:f5:65:ab:86:4d:96:
                    8f:b2:54:0d:d0:76:a6:70:94:65:da:84:6d:19:41:
                    85:7f:b0:08:66:b7:91:43:bd:10:fe:48:ae:0c:1b:
                    95:17:4a:90:40:2f:12:c3:76:c4:2b:95:79:cc:9f:
                    25:cd:5f:b4:4b:76:5b:1f:b7:4e:de:ae:5c:91:57:
                    8e:50:2f:b6:ea:3d:72:6b:f9:86:4f:53:f6:88:19:
                    05:a4:25:5e:91:ae:cc:fe:74:3d:b8:32:6b:49:2b:
                    c0:4d:2c:4c:39:d5:c4:b9:88:b3:be:d9:ff:3a:67:
                    f5:53:4c:0c:05:73:a0:1b:88:8b:e0:72:af:96:64:
                    15:6d:ca:05:9b:c1:24:54:cc:23:f5:f7:84:93:20:
                    3a:8a:90:ec:0e:ad:3f:17:ea:65:83:94:c1:9f:d7:
                    3d:6c:fe:85:1e:b5:24:02:40:e8:17:6f:4f:30:75:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:58:CD:AB:AE:EF:9F:3E:F7:80:14:EA:5B:A8:2C:1E:4D:36:5C
            X509v3 Authority Key Identifier:
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  970

    Signature Algorithm: sha256WithRSAEncryption
         82:3a:9b:0b:25:94:f4:f0:89:48:b9:c3:70:81:8a:33:85:35:
         d5:e7:5d:53:91:11:0a:0a:58:e3:a8:a1:23:62:b9:14:26:7b:
         62:85:8e:68:a7:1f:5b:94:8e:20:73:6d:88:93:0b:f0:25:17:
         ce:88:6d:09:c4:07:16:7d:d7:e1:e5:97:55:a3:07:f1:07:35:
         39:73:54:05:02:ca:00:fc:6d:2c:bb:e0:1a:2e:95:53:5b:64:
         a0:ed:a6:8c:04:45:44:55:5f:3d:7f:76:93:15:a9:34:a3:98:
         11:4e:be:a5:9f:09:1d:f6:4c:51:35:af:e2:3a:fe:d7:5e:93:
         e4:56:33:82:c7:17:9d:e2:00:e4:af:2f:b0:68:23:65:51:c2:
         ea:43:ce:5a:68:2c:07:24:5f:d0:8f:a6:87:f9:dc:fa:82:b0:
         72:80:35:9c:8c:1b:bb:83:88:cf:1b:29:75:9e:20:d1:f2:ac:
         ff:a8:0b:d6:bb:fd:da:40:57:1b:c4:4f:c6:d3:bb:ed:31:ad:
         c1:d1:92:d2:e6:e4:1d:5c:26:25:ca:f8:98:68:90:c0:37:2b:
         71:f9:40:b4:8c:78:80:66:dc:e4:6a:57:e7:3b:b8:28:c0:bc:
         3f:a2:bd:dd:97:94:64:56:64:b0:89:15:03:5d:2b:0f:33:39:
         eb:49:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:37:45 2024 by rpki-client on console-fra.rpki-client.org