Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Bee/0/AS199693.asa
File:                     AS199693.asa (raw, json)
Hash identifier:          qMsyM3qOl63fhtZbK8D7XtSYpkK9cPKF7lJDErEMfTk=
Subject key identifier:   48:37:53:CE:23:4E:8A:7A:D9:70:73:E5:17:2C:1D:6C:F8:87:AB:43
Certificate issuer:       /CN=125831cbdf11d65b9dce9268e40f473c5e58b0a6
Certificate serial:       4120EAF22326579E1AE225EA2F5493A5EB4D0836
Authority key identifier: 12:58:31:CB:DF:11:D6:5B:9D:CE:92:68:E4:0F:47:3C:5E:58:B0:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Elgxy98R1ludzpJo5A9HPF5YsKY.cer
Subject info access:      rsync://rpki.co/repo/Bee/0/AS199693.asa
Signing time:             Thu 13 Apr 2023 09:41:53 +0000
ASPA not before:          Thu 13 Apr 2023 09:36:53 +0000
ASPA not after:           Thu 11 Apr 2024 09:41:53 +0000
Customer ASID:            199693
Provider set:             AS: 6939
                          AS: 20473
                          AS: 50058

Validation:               OK
Signature path:           rsync://rpki.co/repo/Bee/0/125831CBDF11D65B9DCE9268E40F473C5E58B0A6.crl
                          rsync://rpki.co/repo/Bee/0/125831CBDF11D65B9DCE9268E40F473C5E58B0A6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Elgxy98R1ludzpJo5A9HPF5YsKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:20:ea:f2:23:26:57:9e:1a:e2:25:ea:2f:54:93:a5:eb:4d:08:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125831cbdf11d65b9dce9268e40f473c5e58b0a6
        Validity
            Not Before: Apr 13 09:36:53 2023 GMT
            Not After : Apr 11 09:41:53 2024 GMT
        Subject: CN=483753CE234E8A7AD97073E5172C1D6CF887AB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a7:c2:05:e1:84:ad:4b:50:4d:fd:a2:0a:36:
                    ea:72:2d:6b:2d:a3:88:60:01:d0:b1:d3:36:42:2f:
                    12:54:0b:ba:f5:bb:d4:db:09:e9:ed:76:0d:c9:fc:
                    38:d9:19:19:e1:d5:36:80:a4:38:40:85:d0:49:c7:
                    ad:eb:77:7c:4e:f7:59:f8:a9:fe:0e:18:01:c5:97:
                    23:7c:47:d8:b0:53:b9:ba:ea:e9:b7:52:ea:df:eb:
                    45:72:79:4e:4e:cf:aa:ed:05:90:bb:01:ab:04:46:
                    36:4a:7b:71:a4:b6:38:25:1b:42:ab:c3:06:c0:ea:
                    1b:57:19:5a:34:69:2e:5a:e7:00:f2:6e:4f:32:ab:
                    f3:ab:e7:e6:18:68:ee:2a:1c:f0:c9:7d:e6:66:8c:
                    e3:95:2a:c2:fb:87:c4:3c:f5:ef:e9:8a:84:f8:33:
                    40:1c:b4:57:e7:5b:dd:5a:5b:67:83:6a:27:ea:00:
                    10:9c:33:a1:29:bf:95:2b:49:95:2a:39:ee:df:22:
                    e9:0a:d0:20:9f:f3:e6:2f:f4:03:7b:88:a6:5f:7c:
                    79:43:4d:dd:4c:fa:39:19:60:91:91:da:ad:f5:fb:
                    5c:11:73:92:f7:10:f8:00:72:02:25:0b:b8:44:b1:
                    42:6d:65:7a:bd:46:2e:3d:df:e3:20:c9:3b:d4:6c:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                48:37:53:CE:23:4E:8A:7A:D9:70:73:E5:17:2C:1D:6C:F8:87:AB:43
            X509v3 Authority Key Identifier: 
                keyid:12:58:31:CB:DF:11:D6:5B:9D:CE:92:68:E4:0F:47:3C:5E:58:B0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/Bee/0/125831CBDF11D65B9DCE9268E40F473C5E58B0A6.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elgxy98R1ludzpJo5A9HPF5YsKY.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/Bee/0/AS199693.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199693

    Signature Algorithm: sha256WithRSAEncryption
         95:f3:6f:d1:f3:ab:2b:96:a2:ce:41:7b:6e:46:01:fc:b9:ee:
         09:95:9a:c6:15:70:d0:8c:f1:17:a5:74:9a:65:d2:2e:74:b9:
         95:3c:d4:b4:93:14:e8:b4:76:8c:d5:31:72:c7:bd:66:0b:d3:
         5b:8c:2a:9d:ef:0d:6d:ca:48:21:5a:82:37:15:9a:28:db:60:
         7a:3f:e3:83:dc:da:be:68:de:c9:37:8b:47:af:32:f8:ba:c3:
         10:39:5a:55:01:15:3c:de:ef:a2:b7:06:ef:95:11:5e:57:22:
         2e:3f:00:38:e0:42:0a:a6:e8:ef:0c:56:ee:dc:62:61:fb:3e:
         f8:9c:52:0a:07:5a:2f:6e:62:7b:67:27:54:9a:03:fa:4d:60:
         9c:be:d5:b2:77:38:ba:8a:10:a5:8b:1d:91:61:6d:cd:5f:d8:
         42:f2:c3:77:35:36:66:df:4c:aa:f1:f9:5f:f1:8a:62:db:f6:
         b8:58:ad:69:a0:b4:f3:b2:10:cd:4e:24:09:16:da:f8:15:08:
         0f:19:70:8a:bf:52:a4:2c:48:ae:84:8d:d2:6d:b7:89:87:b8:
         c2:13:39:38:51:45:38:3f:45:7c:89:c8:96:26:bf:02:5e:c7:
         e2:f7:3f:10:2b:f0:8a:a1:e6:5f:2b:02:f1:ef:db:7b:93:7b:
         b4:cb:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----