Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Cube/0/AS208690.asa
File:                     AS208690.asa (raw, json)
Hash identifier:          /rHuoPfcH2eHi2Onzw2HA1qexPLf6Q7Fadw0wFvWrpU=
Subject key identifier:   5A:F6:0A:79:C8:8D:08:3A:35:9E:22:EA:9C:F2:B4:29:56:27:81:EC
Certificate issuer:       /CN=1ba12ca1d58dbf5542391686e6cf8c62bf8bf1f9
Certificate serial:       3A25724A1AE04708C3BF75F749BEA1221B8DF15D
Authority key identifier: 1B:A1:2C:A1:D5:8D:BF:55:42:39:16:86:E6:CF:8C:62:BF:8B:F1:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6EsodWNv1VCORaG5s-MYr-L8fk.cer
Subject info access:      rsync://rpki.co/repo/Cube/0/AS208690.asa
Signing time:             Fri 12 May 2023 10:36:26 +0000
ASPA not before:          Fri 12 May 2023 10:31:26 +0000
ASPA not after:           Fri 10 May 2024 10:36:26 +0000
Customer ASID:            208690
Provider set:             AS: 945
                          AS: 6939
                          AS: 20473
                          AS: 34927
                          AS: 38074
                          AS: 50058
                          AS: 53667
                          AS: 59105

Validation:               OK
Signature path:           rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.crl
                          rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6EsodWNv1VCORaG5s-MYr-L8fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 May 2023 06:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:72:4a:1a:e0:47:08:c3:bf:75:f7:49:be:a1:22:1b:8d:f1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba12ca1d58dbf5542391686e6cf8c62bf8bf1f9
        Validity
            Not Before: May 12 10:31:26 2023 GMT
            Not After : May 10 10:36:26 2024 GMT
        Subject: CN=5AF60A79C88D083A359E22EA9CF2B429562781EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:4a:ea:d2:51:3e:1e:11:86:a1:0f:ac:53:
                    c9:6d:94:96:97:a1:d4:d5:a4:49:64:f8:50:c5:fc:
                    6c:e8:d4:c5:0a:47:83:89:70:39:08:54:15:41:d1:
                    97:88:f7:ae:06:69:25:36:99:89:e3:1a:b6:76:f1:
                    cb:b5:2f:a3:49:ca:5e:7b:b3:d0:51:26:d2:23:22:
                    ae:90:70:d5:bf:81:db:90:fe:e9:f6:95:79:4e:5d:
                    65:88:dd:74:0f:a8:f4:c1:72:d1:3b:f6:20:ab:c4:
                    ff:ae:77:63:a3:60:5d:c7:da:f1:71:d2:ef:9a:d6:
                    2a:8b:a0:49:74:7d:07:5f:af:12:b1:9a:5a:47:82:
                    18:19:09:ef:dc:b2:a8:5d:42:a9:89:cd:64:08:0b:
                    8a:52:46:f8:a2:94:c1:c8:f3:8c:93:8e:53:54:a6:
                    89:ce:47:86:4f:8f:e3:7e:33:36:7b:3a:58:27:60:
                    ca:85:1e:82:6d:4a:64:bd:aa:da:39:9f:43:ef:35:
                    63:08:01:93:f5:da:2f:3e:31:ae:57:25:a6:77:50:
                    de:42:18:15:fd:c0:b5:3c:09:be:64:1e:40:cd:79:
                    c3:4d:dd:0e:1e:85:ef:f9:47:3b:d3:34:84:b1:75:
                    ae:f1:e2:fd:58:f2:d0:de:7a:2b:77:a5:f7:75:0e:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5A:F6:0A:79:C8:8D:08:3A:35:9E:22:EA:9C:F2:B4:29:56:27:81:EC
            X509v3 Authority Key Identifier: 
                keyid:1B:A1:2C:A1:D5:8D:BF:55:42:39:16:86:E6:CF:8C:62:BF:8B:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6EsodWNv1VCORaG5s-MYr-L8fk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/Cube/0/AS208690.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208690

    Signature Algorithm: sha256WithRSAEncryption
         c1:99:a8:2f:eb:f9:15:54:41:c2:36:07:cf:e7:63:7a:12:f5:
         0e:c8:66:e8:f2:2c:fc:69:d4:ad:05:bb:c8:77:1e:94:1d:b5:
         47:12:5a:5a:d9:53:e7:69:83:a5:98:73:c4:f0:71:da:bb:a4:
         52:e4:46:56:f8:71:d6:f4:c4:12:14:ea:cb:99:d3:b2:50:bd:
         65:24:06:4a:a0:4a:00:24:6c:79:bb:70:d4:88:d1:8c:ea:04:
         42:bd:43:54:7b:c4:7a:69:ec:10:57:b0:2c:b3:f4:87:05:9a:
         57:a6:0f:af:18:c2:c1:b8:23:e2:bf:5d:5a:62:3f:7f:bf:96:
         f1:87:a0:0a:58:cf:58:10:d2:f0:60:f9:95:cc:6c:18:21:d7:
         1a:1e:4d:ef:ae:4e:89:00:16:7e:ac:6b:02:4c:5f:74:cc:4b:
         b4:26:a1:9c:2c:51:69:49:b8:00:1a:fd:1d:5b:04:1a:9f:ff:
         77:26:66:1f:93:34:67:da:92:90:58:08:82:4a:db:1f:f6:ab:
         93:0a:6b:05:7b:b8:3e:0a:4f:92:ca:ad:76:ea:1e:97:e1:ad:
         86:a0:29:d1:aa:21:8d:6b:99:04:3a:06:3e:41:73:b8:94:ae:
         b0:d7:a0:ef:a1:0e:e0:ae:9d:cf:27:ac:13:5e:b6:48:7b:6c:
         b3:19:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 12 11:15:27 2023 by rpki-client on console-fra.rpki-client.org