Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/AS149301.asa
File:                     AS149301.asa (raw, json)
Hash identifier:          CKW4iQqZLOwm/Nyl+M6vo0v9tKVDLbTCf3S6zZM2oQ8=
Subject key identifier:   6F:1B:D5:6E:75:C9:83:FE:57:06:0A:80:AC:9F:D3:97:FF:75:FB:B8
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       3F864F670E0A847D88FF9BF4439B832683987F64
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/AS149301.asa
Signing time:             Mon 17 Jun 2024 06:01:42 +0000
ASPA not before:          Mon 17 Jun 2024 05:56:42 +0000
ASPA not after:           Mon 16 Jun 2025 06:01:42 +0000
Customer ASID:            149301
Providers:                AS: 20473
                          AS: 61138

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jul 2024 09:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:86:4f:67:0e:0a:84:7d:88:ff:9b:f4:43:9b:83:26:83:98:7f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jun 17 05:56:42 2024 GMT
            Not After : Jun 16 06:01:42 2025 GMT
        Subject: CN=6F1BD56E75C983FE57060A80AC9FD397FF75FBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:62:87:d3:0c:7e:bc:26:b6:83:ca:e2:4b:
                    95:31:80:21:23:39:63:0d:8a:6c:bb:a7:af:e7:b4:
                    6e:2c:c3:dd:0d:eb:8f:3e:98:9d:a9:e8:d2:92:f8:
                    9f:5e:49:c0:e3:25:35:20:db:b1:2e:6e:00:2f:e0:
                    c9:37:0c:30:22:c4:93:a3:95:37:ac:80:c6:17:6c:
                    4d:67:f5:f4:f9:91:06:ee:41:4d:ad:7e:51:1b:3c:
                    32:1f:e1:00:a3:b1:36:05:41:46:c1:bf:4d:ef:1a:
                    eb:43:08:47:e3:c4:4a:84:ad:93:6b:b9:c3:b9:13:
                    fa:57:11:2f:6b:a2:0d:d2:09:df:9b:56:25:84:bd:
                    84:a0:7f:49:7a:ae:26:c6:a4:df:03:a3:da:da:e2:
                    6a:c1:45:da:c3:f1:1b:57:83:30:da:bd:ae:c0:39:
                    80:20:92:98:3c:9a:b8:18:68:a0:57:34:d1:d9:03:
                    fc:b8:a2:58:b0:12:f0:a0:ff:04:7a:ee:5c:63:89:
                    84:3f:f7:0d:bc:72:51:e8:b6:0d:61:3d:0d:9b:53:
                    74:5f:44:39:32:7d:27:c9:d2:c2:18:34:62:e3:0f:
                    9d:48:d6:fd:cb:a8:07:a9:72:10:d8:01:bf:18:56:
                    7c:fe:2a:f6:8d:f0:3b:1a:da:71:32:0e:9b:c3:6f:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1B:D5:6E:75:C9:83:FE:57:06:0A:80:AC:9F:D3:97:FF:75:FB:B8
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/AS149301.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149301

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:3b:df:3d:bf:00:e4:3a:03:ce:70:eb:05:d6:44:97:4b:
         ef:90:fc:d6:df:df:65:36:94:6e:70:a5:87:e4:05:f1:90:56:
         34:20:6f:79:7c:19:ac:01:1e:27:1e:9b:ab:b9:82:ee:72:03:
         ad:2b:09:2b:b6:8a:b2:f4:58:0e:09:03:0b:d5:8c:f3:e4:6b:
         f8:90:31:2d:49:f8:87:9f:9e:72:66:ff:98:3f:54:63:fe:aa:
         81:23:9b:37:d1:38:33:ac:39:ae:7d:95:af:f3:5d:07:79:36:
         78:37:87:4b:df:d2:f5:92:20:49:13:bc:bd:a1:dc:9c:8f:d0:
         fd:00:e2:b8:a2:c3:6d:50:bc:4c:5d:49:ad:15:2b:e5:6b:8e:
         6a:72:0f:9d:91:be:3c:79:83:c3:09:b9:d9:00:bf:87:9d:f1:
         d2:4a:97:11:ee:87:41:1b:10:ce:9e:22:c5:84:d2:dd:c5:e9:
         0f:f5:d3:f8:c8:46:70:30:43:79:52:c2:9c:8d:7a:59:d7:ea:
         d3:b9:77:c2:5f:12:67:3a:24:6e:17:1e:b0:d3:04:9a:d8:42:
         3f:47:03:41:55:7d:a7:e7:dc:67:22:46:1c:77:86:08:6e:a7:
         80:49:75:af:9e:2e:96:0b:47:9c:5f:5d:36:be:d1:8f:5b:12:
         77:0f:a8:0e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUP4ZPZw4KhH2I/5v0Q5uDJoOYf2QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI0MDYxNzA1NTY0MloX
DTI1MDYxNjA2MDE0MlowMzExMC8GA1UEAxMoNkYxQkQ1NkU3NUM5ODNGRTU3MDYw
QTgwQUM5RkQzOTdGRjc1RkJCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOPmYofTDH68JraDyuJLlTGAISM5Yw2KbLunr+e0bizD3Q3rjz6Ynano0pL4
n15JwOMlNSDbsS5uAC/gyTcMMCLEk6OVN6yAxhdsTWf19PmRBu5BTa1+URs8Mh/h
AKOxNgVBRsG/Te8a60MIR+PESoStk2u5w7kT+lcRL2uiDdIJ35tWJYS9hKB/SXqu
Jsak3wOj2triasFF2sPxG1eDMNq9rsA5gCCSmDyauBhooFc00dkD/LiiWLAS8KD/
BHruXGOJhD/3DbxyUei2DWE9DZtTdF9EOTJ9J8nSwhg0YuMPnUjW/cuoB6lyENgB
vxhWfP4q9o3wOxracTIOm8NvRcsCAwEAAaOCAgQwggIAMB0GA1UdDgQWBBRvG9Vu
dcmD/lcGCoCsn9OX/3X7uDAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwcAYIKwYB
BQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNi9B
UzE0OTMwMS5hc2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMCRzUwDQYJKoZIhvcNAQELBQADggEBADqpO989vwDkOgPO
cOsF1kSXS++Q/Nbf32U2lG5wpYfkBfGQVjQgb3l8GawBHicem6u5gu5yA60rCSu2
irL0WA4JAwvVjPPka/iQMS1J+IefnnJm/5g/VGP+qoEjmzfRODOsOa59la/zXQd5
Nng3h0vf0vWSIEkTvL2h3JyP0P0A4riiw21QvExdSa0VK+VrjmpyD52Rvjx5g8MJ
udkAv4ed8dJKlxHuh0EbEM6eIsWE0t3F6Q/10/jIRnAwQ3lSwpyNelnX6tO5d8Jf
Emc6JG4XHrDTBJrYQj9HA0FVfafn3GciRhx3hghup4BJda+eLpYLR5xfXTa+0Y9b
EncPqA4=
-----END CERTIFICATE-----
Generated at Sun Jul 14 08:56:39 2024 by rpki-client on console-ams.rpki-client.org