Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS211380/0/AS211380.asa
File:                     AS211380.asa (raw, json)
Hash identifier:          kBvtr16Q8dG8ATUSaB9LpSbchZIHOp13KI0d/j1FK1w=
Subject key identifier:   58:5E:F2:1F:33:99:9D:81:69:C6:5E:8F:70:20:BE:C6:7A:B7:45:C7
Certificate issuer:       /CN=434cb8853b54180da13d01acd32d2ccdaa5f4a3e
Certificate serial:       7FB8F7864AB693F7467AECE706E3256986ABB3E1
Authority key identifier: 43:4C:B8:85:3B:54:18:0D:A1:3D:01:AC:D3:2D:2C:CD:AA:5F:4A:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0y4hTtUGA2hPQGs0y0szapfSj4.cer
Subject info access:      rsync://rpki.co/repo/AS211380/0/AS211380.asa
Signing time:             Mon 22 May 2023 22:33:43 +0000
ASPA not before:          Mon 22 May 2023 22:28:43 +0000
ASPA not after:           Mon 20 May 2024 22:33:43 +0000
Customer ASID:            211380
Provider set:             AS: 6939
                          AS: 21738
                          AS: 34927
                          AS: 41051
                          AS: 50058
                          AS: 58057
                          AS: 137509
                          AS: 209861
                          AS: 212895
                          AS: 393577
                          AS: 400818

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.crl
                          rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q0y4hTtUGA2hPQGs0y0szapfSj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 May 2023 15:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b8:f7:86:4a:b6:93:f7:46:7a:ec:e7:06:e3:25:69:86:ab:b3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434cb8853b54180da13d01acd32d2ccdaa5f4a3e
        Validity
            Not Before: May 22 22:28:43 2023 GMT
            Not After : May 20 22:33:43 2024 GMT
        Subject: CN=585EF21F33999D8169C65E8F7020BEC67AB745C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:35:98:2d:77:4b:16:a7:68:6b:4e:56:05:
                    cb:94:0b:a2:d5:7c:e1:86:a8:c9:24:0a:fb:fb:d0:
                    0e:a0:5b:c1:b4:24:b8:d2:3c:93:cb:33:75:5e:cb:
                    b2:40:be:f7:3a:fe:08:8c:81:4c:a8:31:47:a1:36:
                    29:09:14:5a:65:e2:ee:2d:fa:d0:d1:d4:52:c1:7d:
                    da:ef:ca:ee:0d:63:1e:cc:49:63:c6:9b:fa:bd:e7:
                    a6:22:3b:c2:04:49:d8:f1:63:e5:ae:c9:75:6d:eb:
                    71:e6:5d:23:0f:7b:ab:27:42:7d:e1:73:90:ac:43:
                    77:54:bc:16:65:ed:36:ba:2d:7b:cd:a2:9a:b4:17:
                    51:fe:32:07:43:5c:21:5a:63:b7:ab:87:65:60:56:
                    8c:36:b1:bd:e9:da:e3:4f:43:a8:fb:a5:b7:0f:5a:
                    fa:b7:e9:d6:bd:3f:ab:c9:ab:8b:4a:07:c3:d7:1a:
                    8d:0c:4e:71:2f:06:43:48:8e:31:f8:66:22:54:cb:
                    08:ae:47:47:c9:a8:31:be:7f:6b:53:ae:01:b9:8c:
                    cd:c8:36:d1:e9:55:39:20:12:a8:64:05:2c:4e:8d:
                    18:02:92:69:a2:97:a5:f9:bc:0d:79:41:6e:ff:dc:
                    35:a0:8a:5b:fb:31:1b:cb:3c:a9:c9:e1:c5:83:10:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:5E:F2:1F:33:99:9D:81:69:C6:5E:8F:70:20:BE:C6:7A:B7:45:C7
            X509v3 Authority Key Identifier: 
                keyid:43:4C:B8:85:3B:54:18:0D:A1:3D:01:AC:D3:2D:2C:CD:AA:5F:4A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0y4hTtUGA2hPQGs0y0szapfSj4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS211380/0/AS211380.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211380

    Signature Algorithm: sha256WithRSAEncryption
         26:26:5b:90:9e:56:28:87:89:1f:69:cb:3b:e3:97:bd:2d:5b:
         5e:e6:96:bf:c3:81:be:ef:38:eb:5f:d5:11:f7:e7:14:3a:83:
         f2:7d:d5:7c:d2:c4:87:c8:2a:a2:0e:96:e6:87:36:fc:93:9b:
         c3:99:af:61:b7:2b:f9:69:37:fa:53:eb:50:c5:4a:53:54:75:
         c3:c3:4b:e9:78:45:bc:98:5e:d1:a9:e2:7a:d2:d9:0f:8c:c3:
         2f:4e:c7:c7:3a:01:33:c3:22:6e:43:89:27:ee:02:9d:19:9b:
         f4:15:84:c8:65:c2:2a:7a:0b:97:42:c0:46:7d:0b:f5:e9:4c:
         b1:af:2b:c7:27:a6:68:40:8a:f1:13:5e:1c:45:66:88:38:06:
         b0:2c:2b:77:f8:ed:4c:bf:3b:c8:e2:8e:ab:c8:d1:50:a6:fd:
         fc:f4:88:d2:f9:15:4a:d8:04:4a:90:9a:b2:ff:4c:27:55:ee:
         83:f4:e1:21:3e:fb:b0:d9:ab:12:3b:5a:8b:cb:c2:51:fc:05:
         75:c1:dd:8e:d4:3f:6d:9b:74:34:d1:af:32:3b:5d:df:32:92:
         9a:b6:22:26:39:27:ed:bd:f4:6b:8c:5e:18:5e:c1:5e:64:43:
         be:4e:d7:81:e0:82:1e:c0:4f:ff:40:b2:61:3e:5f:ef:29:db:
         20:d8:73:2b
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUf7j3hkq2k/dGeuznBuMlaYars+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM0Y2I4ODUzYjU0MTgwZGExM2QwMWFjZDMyZDJjY2Rh
YTVmNGEzZTAeFw0yMzA1MjIyMjI4NDNaFw0yNDA1MjAyMjMzNDNaMDMxMTAvBgNV
BAMTKDU4NUVGMjFGMzM5OTlEODE2OUM2NUU4RjcwMjBCRUM2N0FCNzQ1QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhjWYLXdLFqdoa05WBcuUC6LV
fOGGqMkkCvv70A6gW8G0JLjSPJPLM3Vey7JAvvc6/giMgUyoMUehNikJFFpl4u4t
+tDR1FLBfdrvyu4NYx7MSWPGm/q956YiO8IESdjxY+WuyXVt63HmXSMPe6snQn3h
c5CsQ3dUvBZl7Ta6LXvNopq0F1H+MgdDXCFaY7erh2VgVow2sb3p2uNPQ6j7pbcP
Wvq36da9P6vJq4tKB8PXGo0MTnEvBkNIjjH4ZiJUywiuR0fJqDG+f2tTrgG5jM3I
NtHpVTkgEqhkBSxOjRgCkmmil6X5vA15QW7/3DWgilv7MRvLPKnJ4cWDENinAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUWF7yHzOZnYFpxl6PcCC+xnq3RccwHwYDVR0j
BBgwFoAUQ0y4hTtUGA2hPQGs0y0szapfSj4wDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjExMzgwLzAvNDM0
Q0I4ODUzQjU0MTgwREExM0QwMUFDRDMyRDJDQ0RBQTVGNEEzRS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1EweTRoVHRVR0EyaFBRR3MweTBzemFwZlNqNC5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIxMTM4MC8wL0FTMjExMzgwLmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5tDANBgkqhkiG9w0BAQsFAAOC
AQEAJiZbkJ5WKIeJH2nLO+OXvS1bXuaWv8OBvu8461/VEffnFDqD8n3VfNLEh8gq
og6W5oc2/JObw5mvYbcr+Wk3+lPrUMVKU1R1w8NL6XhFvJhe0anietLZD4zDL07H
xzoBM8MibkOJJ+4CnRmb9BWEyGXCKnoLl0LARn0L9elMsa8rxyemaECK8RNeHEVm
iDgGsCwrd/jtTL87yOKOq8jRUKb9/PSI0vkVStgESpCasv9MJ1Xug/ThIT77sNmr
Ejtai8vCUfwFdcHdjtQ/bZt0NNGvMjtd3zKSmrYiJjkn7b30a4xeGF7BXmRDvk7X
geCCHsBP/0CyYT5f7ynbINhzKw==
-----END CERTIFICATE-----