Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/AS21957.asa
File:                     AS21957.asa (raw, json)
Hash identifier:          Ig+3p6XaLqDT7TYxBjFSg7x8xX+RQRBTdzCMixOFdGE=
Subject key identifier:   B6:D0:2F:7D:02:1E:71:82:0D:A1:A0:E7:8D:F0:3D:EC:B3:AD:A5:86
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       02F6FBD4154E90711488B46892980DCDCCE0CA8B
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/AS21957.asa
Signing time:             Tue 29 Nov 2022 12:00:54 +0000
ASPA not before:          Tue 29 Nov 2022 11:55:54 +0000
ASPA not after:           Tue 28 Nov 2023 12:00:54 +0000
Customer AS:              21957
Provider Set:             AS: 970

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Mar 2023 23:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f6:fb:d4:15:4e:90:71:14:88:b4:68:92:98:0d:cd:cc:e0:ca:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Nov 29 11:55:54 2022 GMT
            Not After : Nov 28 12:00:54 2023 GMT
        Subject: CN=B6D02F7D021E71820DA1A0E78DF03DECB3ADA586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:d8:17:6c:a9:6f:38:d5:df:77:01:a5:4e:
                    0f:59:3b:45:d5:0e:9e:7e:b1:75:dc:5a:49:0f:48:
                    e2:71:19:f0:5b:a1:46:a4:59:37:f6:29:ac:53:7f:
                    fb:f7:6e:43:35:1e:67:d3:05:4d:65:b8:70:87:b5:
                    a5:bd:81:c8:a3:09:db:a8:46:bb:c0:da:d9:d3:03:
                    0b:e3:8f:be:93:df:03:31:59:f6:07:5e:7e:5a:37:
                    73:53:02:b3:7e:d5:7f:7a:c1:7a:ba:b9:a5:1f:cf:
                    16:90:a2:38:e9:9b:a0:ce:25:8d:91:96:3c:ca:5d:
                    b6:c4:cb:1e:8e:d5:c4:7b:49:e0:d9:50:ad:a4:d5:
                    d6:e3:c9:f6:6a:4b:4f:c3:59:a6:4d:15:67:83:04:
                    1a:43:de:ec:4b:82:33:d0:d3:e0:52:9e:23:88:d1:
                    d9:9e:39:31:a4:65:98:2a:de:ad:63:f2:bd:84:f4:
                    33:e9:10:93:da:38:b9:52:45:40:7c:45:63:c4:da:
                    ba:66:45:0e:2d:c9:b0:26:bc:71:03:e8:f3:ea:f4:
                    54:b8:ee:1a:14:34:78:4b:d0:f1:94:61:85:a1:c3:
                    bb:52:7b:07:a6:83:52:e0:a4:e0:44:5f:df:2e:dc:
                    ca:b1:ad:79:c3:06:4d:2f:2a:7d:7d:c3:e4:02:a2:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:D0:2F:7D:02:1E:71:82:0D:A1:A0:E7:8D:F0:3D:EC:B3:AD:A5:86
            X509v3 Authority Key Identifier: 
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/AS21957.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21957

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:aa:d5:c3:b7:a6:70:36:70:d2:97:69:fc:84:2c:67:fc:
         9d:aa:b0:88:00:12:bb:79:ac:b7:ba:e9:1b:40:fc:75:87:62:
         bd:2b:70:c6:4a:48:b7:d8:e0:11:51:8f:8a:24:05:0c:f4:26:
         0e:4d:e6:8b:5f:1a:bb:36:53:84:56:b3:72:98:b4:21:c3:5c:
         41:ba:a5:e1:50:1c:b9:19:2d:54:73:c6:32:05:92:32:8f:98:
         1e:b7:65:8a:2d:2d:19:d0:39:a0:29:78:53:f8:3e:ec:9f:10:
         98:a3:13:80:1c:4f:06:23:1f:a0:c6:3f:f5:3d:8e:d0:d1:fa:
         69:58:52:0a:9c:8e:77:a1:80:e9:86:04:a6:ea:05:0b:37:9f:
         fc:8b:35:4f:4d:2b:c9:87:44:c8:85:b9:2d:3b:58:82:e0:fc:
         78:2b:2f:46:22:9f:ec:7e:df:e8:ed:a1:cd:2a:b2:bb:2f:22:
         62:1f:d1:b4:f4:a3:53:ae:0f:a2:c8:39:b4:f5:9b:f2:14:c3:
         9f:2e:22:64:46:01:02:38:88:03:b7:6b:96:4f:0c:a9:e6:75:
         c0:1d:1d:44:db:e8:ec:64:a4:38:64:01:59:b0:a7:e9:a5:16:
         29:f3:c9:fc:e9:c9:63:a4:dd:ac:46:79:4b:d5:9c:fd:e1:f0:
         1e:31:b4:33
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUAvb71BVOkHEUiLRokpgNzczgyoswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGJiZmI1YjMyYjRjYTQ0MjhlYzY3YjJk
ZWU0NGMyODgxMDM3ZWIwNTUwHhcNMjIxMTI5MTE1NTU0WhcNMjMxMTI4MTIwMDU0
WjAzMTEwLwYDVQQDEyhCNkQwMkY3RDAyMUU3MTgyMERBMUEwRTc4REYwM0RFQ0Iz
QURBNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoTYF2ypbzjV
33cBpU4PWTtF1Q6efrF13FpJD0jicRnwW6FGpFk39imsU3/7925DNR5n0wVNZbhw
h7WlvYHIownbqEa7wNrZ0wML44++k98DMVn2B15+WjdzUwKzftV/esF6urmlH88W
kKI46ZugziWNkZY8yl22xMsejtXEe0ng2VCtpNXW48n2aktPw1mmTRVngwQaQ97s
S4Iz0NPgUp4jiNHZnjkxpGWYKt6tY/K9hPQz6RCT2ji5UkVAfEVjxNq6ZkUOLcmw
JrxxA+jz6vRUuO4aFDR4S9DxlGGFocO7UnsHpoNS4KTgRF/fLtzKsa15wwZNLyp9
fcPkAqJnJwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFLbQL30CHnGCDaGg543wPeyz
raWGMB8GA1UdIwQYMBaAFCZxgbCl3TjWC8wiiBNCxk/8jLwfMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyM2JkNDU0NzUyYmU2LzAv
MjY3MTgxQjBBNUREMzhENjBCQ0MyMjg4MTM0MkM2NEZGQzhDQkMxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzM5MDY1YWNjLWJlZWQtNDExNS1iYzZjLTYzZGUyMzJmMmEwNC8wMmJh
M2Y1MjU0YmJmYjViMzJiNGNhNDQyOGVjNjdiMmRlZTQ0YzI4ODEwMzdlYjA1NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIzYmQ0NTQ3
NTJiZTYvMC9BUzIxOTU3LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAlXFMA0GCSqGSIb3DQEBCwUAA4IBAQAKKarV
w7emcDZw0pdp/IQsZ/ydqrCIABK7eay3uukbQPx1h2K9K3DGSki32OARUY+KJAUM
9CYOTeaLXxq7NlOEVrNymLQhw1xBuqXhUBy5GS1Uc8YyBZIyj5get2WKLS0Z0Dmg
KXhT+D7snxCYoxOAHE8GIx+gxj/1PY7Q0fppWFIKnI53oYDphgSm6gULN5/8izVP
TSvJh0TIhbktO1iC4Px4Ky9GIp/sft/o7aHNKrK7LyJiH9G09KNTrg+iyDm09Zvy
FMOfLiJkRgECOIgDt2uWTwyp5nXAHR1E2+jsZKQ4ZAFZsKfppRYp88n86cljpN2s
RnlL1Zz94fAeMbQz
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:14 2023 by rpki-client on console-fra.rpki-client.org