Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/AS59486.asa
File:                     AS59486.asa (raw, json)
Hash identifier:          ZYa5D0KYXncTK/3ORJE+N2xlum72jDy11uyZTbNrbhc=
Subject key identifier:   5D:D1:01:C3:15:09:F1:76:0B:48:A3:65:F9:54:C6:8E:A8:88:4C:26
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       0A6A756A2030CF5204CCA5FE3A8E6B87801837B3
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/AS59486.asa
Signing time:             Mon 10 Apr 2023 02:58:48 +0000
ASPA not before:          Mon 10 Apr 2023 02:53:48 +0000
ASPA not after:           Mon 08 Apr 2024 02:58:48 +0000
Customer ASID:            59486
Provider set:             AS: 47449

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
                          rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
                          rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
                          rsync://rpki.co/repo/August/1/50EB1AF38EABDE95EBD68D9164228B647488E874.crl
                          rsync://rpki.co/repo/August/1/50EB1AF38EABDE95EBD68D9164228B647488E874.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOsa846r3pXr1o2RZCKLZHSI6HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 01:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6a:75:6a:20:30:cf:52:04:cc:a5:fe:3a:8e:6b:87:80:18:37:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 02:53:48 2023 GMT
            Not After : Apr  8 02:58:48 2024 GMT
        Subject: CN=5DD101C31509F1760B48A365F954C68EA8884C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:72:10:b3:33:c3:24:fd:6a:f2:6a:13:1d:
                    dc:08:08:77:fe:6a:e3:bb:e8:83:51:f4:6e:1d:dc:
                    43:89:51:e7:0d:f8:a2:98:de:14:1f:4c:d6:f7:31:
                    5d:97:5d:80:1a:f7:6e:67:5d:04:68:4f:39:f7:7f:
                    c1:23:f1:5c:7a:b8:d5:0f:7d:27:d0:f4:19:47:17:
                    ca:d0:a3:8a:f4:4b:96:90:44:32:4e:08:b9:51:76:
                    54:37:81:2a:ef:ff:4d:b8:c0:bc:2b:7b:b8:46:30:
                    d4:26:70:28:5c:e4:ba:55:71:db:44:60:bf:bf:0a:
                    8b:96:5b:34:bc:6e:48:6a:63:0f:63:52:d4:66:44:
                    74:04:33:a7:12:4a:bb:f8:7e:db:3a:55:04:f6:bf:
                    73:ee:16:9b:9b:20:d1:c1:b9:00:0d:88:87:e2:ab:
                    fc:dd:ac:cb:ac:db:61:12:82:6d:70:65:96:66:6b:
                    59:a5:75:a8:66:0d:c3:a2:f1:d2:1f:e1:1d:75:c7:
                    10:20:e4:1b:03:d6:c7:1a:0b:65:0f:0a:7d:8c:a3:
                    ce:ca:f0:11:46:5e:ea:79:a5:89:98:b0:ba:fa:f4:
                    9f:b5:04:0c:41:a3:47:0a:2e:3a:28:4e:c9:b1:53:
                    d0:9c:6b:af:7f:49:9a:42:dc:b1:7c:34:f8:59:98:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:D1:01:C3:15:09:F1:76:0B:48:A3:65:F9:54:C6:8E:A8:88:4C:26
            X509v3 Authority Key Identifier: 
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/AS59486.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:e7:48:cc:2a:f8:2e:5c:7a:95:1c:83:f1:9f:3f:f7:fe:
         c5:12:9d:97:95:d5:d6:0e:20:b6:e0:be:d8:de:0c:84:76:8e:
         ff:7a:78:fd:68:f9:fb:56:6b:cf:2d:dc:43:bc:46:1b:e5:c7:
         96:80:4d:93:83:61:63:e9:22:d7:f3:ad:8f:78:3e:7e:bf:62:
         69:cf:c1:e6:0f:4b:5b:09:42:87:cf:70:5b:84:c3:48:51:42:
         69:b3:db:e0:c0:c0:25:34:e5:f0:5e:90:a3:bc:99:ad:02:ab:
         b2:33:e9:e0:bd:c4:04:09:2b:91:2f:a0:bb:8a:1d:a7:40:ac:
         dc:bd:7a:91:11:ae:da:53:70:c9:14:3d:95:dc:5a:dd:7e:37:
         01:e2:b3:d5:3b:d9:3a:cf:42:43:7d:2b:d5:63:28:1b:72:16:
         59:17:92:08:8d:9b:42:10:ae:8f:a3:77:9f:70:0f:d7:95:84:
         e7:ee:2c:0d:d9:81:b7:b9:3d:bc:20:6e:f7:ee:b3:ef:6a:3d:
         93:1a:6d:6c:de:9b:dd:a3:69:8d:ad:43:c7:79:65:85:c0:f9:
         2d:7e:64:cc:9b:5f:c4:85:43:d8:36:ab:ef:29:6e:a7:29:84:
         82:f9:75:a2:4d:93:98:48:a6:9d:2f:f2:7d:1e:42:c6:d1:d2:
         96:f6:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----