Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/AS151642.asa
File:                     AS151642.asa (raw, json)
Hash identifier:          5TmDKAlnrhUemjI2jwXixvhgYCubE9ZuswWJhVaOtJc=
Subject key identifier:   5F:7B:72:65:0B:78:8A:85:59:DD:BE:07:86:E7:F5:1C:73:6F:E3:2B
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       428B54A5894E8FACDB9558D182CC1B08E53094F8
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/AS151642.asa
Signing time:             Mon 17 Jun 2024 06:03:13 +0000
ASPA not before:          Mon 17 Jun 2024 05:58:13 +0000
ASPA not after:           Mon 16 Jun 2025 06:03:13 +0000
Customer ASID:            151642
Providers:                AS: 20473
                          AS: 61138

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 03:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8b:54:a5:89:4e:8f:ac:db:95:58:d1:82:cc:1b:08:e5:30:94:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Jun 17 05:58:13 2024 GMT
            Not After : Jun 16 06:03:13 2025 GMT
        Subject: CN=5F7B72650B788A8559DDBE0786E7F51C736FE32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:75:63:37:72:22:df:37:df:31:ad:c7:7f:
                    eb:61:c8:d2:08:71:d3:df:ab:a6:4b:b9:c9:02:16:
                    62:5a:48:e6:c7:35:99:c8:76:93:9b:08:4d:a0:f1:
                    f5:36:ee:8c:14:c9:29:cc:39:7b:b6:b8:60:4a:78:
                    dc:a2:ea:a2:e2:0e:e5:7e:f1:98:7c:59:b0:cc:9d:
                    7b:2d:5d:48:7d:10:55:9a:f6:4e:b3:42:26:b5:ee:
                    a4:37:dd:b5:9e:f5:28:a1:41:15:2b:80:57:8e:0d:
                    c8:d0:42:b7:aa:91:48:0d:23:90:a9:4c:7b:98:1f:
                    eb:f4:10:7a:8a:4f:e1:48:8d:d6:c1:54:c9:10:b4:
                    a3:49:1c:1a:df:03:03:6c:15:3a:d2:bf:02:b5:32:
                    9f:bf:cd:d5:87:c3:2d:e1:ee:f4:d5:a8:2d:b0:83:
                    11:5f:f3:7a:17:72:2c:70:44:10:80:de:88:b2:97:
                    87:0c:ff:ca:c7:04:97:b4:85:cf:1c:0a:08:9c:c6:
                    d7:77:d0:29:bc:dc:68:62:fb:7e:95:82:77:74:cb:
                    5e:bd:03:54:99:dd:d2:d1:70:c9:bd:ed:b7:51:2b:
                    cb:63:93:eb:fd:8f:4f:3e:af:0f:4f:9e:a9:29:ce:
                    1b:b1:da:ad:5a:c1:1a:c8:43:bd:e6:0e:49:f1:04:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:72:65:0B:78:8A:85:59:DD:BE:07:86:E7:F5:1C:73:6F:E3:2B
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/AS151642.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151642

    Signature Algorithm: sha256WithRSAEncryption
         93:db:22:dc:a8:51:09:a4:c6:33:87:fb:08:00:02:f3:23:6a:
         f5:48:27:53:d4:ae:00:e4:33:f4:d0:1a:db:2b:a9:f7:bd:7c:
         45:c5:b5:31:4f:3f:ca:3a:11:28:b0:d2:4e:5a:e3:34:e9:9a:
         99:a6:d2:e4:f3:b3:4c:c4:cf:a1:fe:86:4b:c5:07:d4:b0:88:
         90:0f:eb:3a:48:93:6a:bb:ee:a3:ff:cd:36:c7:c1:1d:82:7d:
         95:df:1b:e0:ad:83:65:4d:01:e7:a9:5a:d5:fe:51:d0:be:7f:
         d3:d6:62:fa:7b:e6:91:c1:56:5b:67:31:a5:2f:f5:54:a9:a8:
         e8:f4:69:03:08:0f:3d:73:3f:6c:0f:d4:73:db:81:a9:c1:60:
         33:a2:2a:47:4e:b6:b6:9a:3e:11:03:57:b3:d4:89:44:51:c3:
         94:32:99:6d:c9:87:15:63:b4:9f:b5:0c:26:29:ba:a7:2c:2f:
         da:3c:4d:ae:fc:fb:24:42:d1:9b:c1:8b:57:91:05:32:a5:dc:
         28:64:71:b4:38:ca:f9:38:1d:69:57:d6:85:a2:d0:23:e7:42:
         39:04:2c:6a:03:47:c1:49:bb:3c:cd:48:20:a7:9a:c8:3a:d9:
         b7:13:be:4f:4c:ce:db:3a:e2:48:ec:f8:28:57:a7:16:c3:0c:
         18:e8:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:46 2024 by rpki-client on console-fra.rpki-client.org