Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/AS59678.asa
File:                     AS59678.asa (raw, json)
Hash identifier:          2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=
Subject key identifier:   E9:DF:10:92:60:12:0E:57:F7:1C:7E:82:3C:AD:69:A4:DB:AE:09:EE
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       681DE059841937D584A068B7CE8D1C4490DFB460
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/AS59678.asa
Signing time:             Wed 04 Mar 2026 14:01:07 +0000
ASPA not before:          Wed 04 Mar 2026 13:56:07 +0000
ASPA not after:           Wed 03 Mar 2027 14:01:07 +0000
Customer ASID:            59678
Providers:                AS: 6939
                          AS: 34927
                          AS: 54218
                          AS: 55081
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1d:e0:59:84:19:37:d5:84:a0:68:b7:ce:8d:1c:44:90:df:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Mar  4 13:56:07 2026 GMT
            Not After : Mar  3 14:01:07 2027 GMT
        Subject: CN=E9DF109260120E57F71C7E823CAD69A4DBAE09EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:ee:bb:99:70:13:ff:c3:c3:55:b9:8b:f6:
                    3c:42:1e:f7:1a:ee:29:39:b0:d3:23:82:c3:60:11:
                    77:de:72:4a:f4:15:68:50:bd:54:96:77:2f:b5:72:
                    4e:9c:f7:14:c7:87:f3:63:55:38:9c:13:8d:ff:35:
                    18:aa:43:90:2d:89:eb:99:79:77:c6:7f:57:55:b7:
                    bb:56:cf:bf:ea:b4:9e:8d:de:75:9d:eb:73:ed:e3:
                    80:70:72:82:30:e4:2b:c3:cf:b0:6e:4f:1f:2a:5b:
                    09:e4:81:fa:97:76:f1:f6:b5:f8:45:bf:b8:d9:f7:
                    d4:46:09:7c:79:43:9a:57:1a:4f:86:f0:20:aa:f1:
                    5e:02:01:ce:15:e6:0f:a9:bd:a3:14:f7:cb:61:20:
                    72:0c:89:45:9f:72:48:09:08:01:a3:c4:96:cd:1f:
                    33:4d:7f:fe:f2:5e:6d:d1:5b:a4:7c:ce:94:d5:d6:
                    82:24:1a:97:a9:ae:68:e4:58:6e:3e:2a:23:8b:85:
                    c1:17:53:25:36:22:64:12:da:7a:10:d3:64:ff:2d:
                    db:d9:18:1d:d0:e3:f3:7b:74:75:2e:de:a8:0e:88:
                    71:fb:82:51:01:60:db:88:65:54:65:cf:23:ec:f1:
                    a5:d6:ae:f8:db:ca:8c:53:2b:e8:73:d6:58:9a:4c:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:10:92:60:12:0E:57:F7:1C:7E:82:3C:AD:69:A4:DB:AE:09:EE
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/AS59678.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59678

    Signature Algorithm: sha256WithRSAEncryption
         5a:6c:48:4d:36:05:06:4c:48:09:7a:d2:37:61:81:9f:c8:a7:
         28:68:ce:4b:ca:b0:23:b6:57:4d:4c:a6:24:d6:f5:f6:0d:c2:
         5c:a7:97:f8:dc:e0:80:70:80:80:50:cb:a8:e0:76:48:37:e1:
         ac:91:af:b5:0a:2d:b8:78:e1:8e:97:cc:66:50:ef:92:fd:45:
         c0:ed:6a:b8:dc:c5:90:7e:e7:55:2c:ce:33:75:51:81:37:76:
         fe:25:64:38:73:5a:64:34:73:64:b7:d4:05:72:fa:8f:61:80:
         fa:d9:6b:51:cb:02:a6:ca:2b:c5:28:11:66:6a:e1:fe:4d:1a:
         e6:15:92:3e:b1:e4:e8:be:de:61:74:2b:6c:a0:38:e4:58:6d:
         6d:e6:64:6f:2d:b7:22:60:be:11:4c:64:b0:5c:03:da:5e:4f:
         54:a9:ff:02:13:3b:f1:17:45:1e:5b:17:fb:3b:7f:47:1d:12:
         ef:cf:e4:b8:c2:a8:7c:c8:6a:38:f6:23:65:2c:3f:37:8d:ac:
         af:b7:4e:54:2f:29:47:38:94:47:9f:ed:f5:a4:0b:46:25:d3:
         34:74:c6:92:d9:2a:0e:05:f2:35:38:d4:fb:43:0f:36:79:5c:
         5a:02:3b:ae:64:7d:e5:99:a4:30:70:86:1e:ff:d9:2f:87:12:
         09:03:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:29:13 2026 by rpki-client