Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/John/0/AS200879.asa
File:                     AS200879.asa (raw, json)
Hash identifier:          ON5j2SuEO8h1s8+zjNe1NX1C1K5eU37tI+bEHt2kZHc=
Subject key identifier:   09:7A:F5:89:87:55:B3:51:9F:81:83:03:1A:58:6E:78:07:A3:83:72
Certificate issuer:       /CN=54d437d91283dd46e66c6d998b68cfe98587aea1
Certificate serial:       23A8D5A6B136E49153F3ACDDEC43844250A31047
Authority key identifier: 54:D4:37:D9:12:83:DD:46:E6:6C:6D:99:8B:68:CF:E9:85:87:AE:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNQ32RKD3UbmbG2Zi2jP6YWHrqE.cer
Subject info access:      rsync://rpki.co/repo/John/0/AS200879.asa
Signing time:             Fri 05 May 2023 00:19:10 +0000
ASPA not before:          Fri 05 May 2023 00:14:10 +0000
ASPA not after:           Fri 03 May 2024 00:19:10 +0000
Customer ASID:            200879
Provider set:             AS: 6939
                          AS: 34927
                          AS: 41051
                          AS: 50058
                          AS: 58057
                          AS: 212271
                          AS: 212895

Validation:               OK
Signature path:           rsync://rpki.co/repo/John/0/54D437D91283DD46E66C6D998B68CFE98587AEA1.crl
                          rsync://rpki.co/repo/John/0/54D437D91283DD46E66C6D998B68CFE98587AEA1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNQ32RKD3UbmbG2Zi2jP6YWHrqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 May 2023 22:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a8:d5:a6:b1:36:e4:91:53:f3:ac:dd:ec:43:84:42:50:a3:10:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d437d91283dd46e66c6d998b68cfe98587aea1
        Validity
            Not Before: May  5 00:14:10 2023 GMT
            Not After : May  3 00:19:10 2024 GMT
        Subject: CN=097AF5898755B3519F8183031A586E7807A38372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:18:3d:90:d1:a1:57:a6:c9:94:22:ef:f3:
                    fb:28:e7:b4:4d:30:e8:82:a0:98:c3:e1:0f:8d:5f:
                    9b:73:a1:90:7b:c5:b3:f4:a7:fb:71:ac:6f:5c:f7:
                    45:d4:54:c9:cb:fb:29:e1:a6:23:c4:1b:5c:ed:04:
                    a5:d7:69:b1:ba:d0:bf:46:a9:04:62:8d:3a:f2:a1:
                    16:17:2a:fb:86:c0:ac:f4:3a:2b:6d:0d:cc:24:d4:
                    a2:13:b1:b1:29:75:1b:5a:4a:1e:b1:7a:39:40:11:
                    46:6c:fe:b5:a0:b6:2e:59:08:a1:65:1d:34:3c:04:
                    bb:f3:16:2f:c0:56:2f:43:7a:0d:69:4f:eb:01:d4:
                    a1:a2:7a:d2:a1:28:ef:c6:3b:a4:9b:be:66:a8:b7:
                    5f:df:df:8e:b4:db:c2:2f:51:9a:44:6a:4d:cb:2c:
                    d7:3a:09:4e:8e:21:59:18:ee:63:0d:96:51:cd:2d:
                    43:14:31:33:65:eb:fa:80:61:2e:37:b0:28:55:70:
                    fc:fa:6f:ca:b0:24:4c:66:71:55:e7:83:27:75:45:
                    be:8d:06:c2:3f:d4:00:49:0d:af:05:03:b4:b5:d4:
                    9c:85:64:1f:e2:c3:0a:bd:f1:65:40:fd:9f:b2:28:
                    d2:19:fd:b3:ad:4c:40:a3:72:54:24:26:14:4e:d2:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                09:7A:F5:89:87:55:B3:51:9F:81:83:03:1A:58:6E:78:07:A3:83:72
            X509v3 Authority Key Identifier: 
                keyid:54:D4:37:D9:12:83:DD:46:E6:6C:6D:99:8B:68:CF:E9:85:87:AE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/John/0/54D437D91283DD46E66C6D998B68CFE98587AEA1.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNQ32RKD3UbmbG2Zi2jP6YWHrqE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/John/0/AS200879.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200879

    Signature Algorithm: sha256WithRSAEncryption
         2d:1b:6b:d8:a9:8b:e7:a3:9e:36:52:eb:48:45:f1:45:f3:34:
         00:31:d3:e4:56:cb:77:0e:42:cb:03:3d:60:4e:30:d0:72:94:
         7a:46:86:a9:5f:a0:61:e2:b2:29:09:00:fe:a4:62:49:13:82:
         f5:74:29:c2:5e:76:de:29:9e:13:c6:09:44:fd:20:14:f1:0f:
         a7:ad:47:62:93:2e:00:6f:2b:fb:33:0f:6a:95:2f:ef:58:77:
         f5:fa:4d:09:8c:e6:6e:9a:93:c1:31:cb:d8:2e:af:98:42:dd:
         2c:70:b6:c3:6b:a6:20:b2:e6:fc:59:ed:50:48:78:24:c6:61:
         ae:ab:ef:3c:3b:3a:b8:d2:55:ac:44:57:c1:a0:b4:a2:a4:f5:
         5e:1e:36:f8:62:39:5f:7f:f7:63:d7:ef:b0:af:54:77:fa:a2:
         9c:9f:2a:0f:18:ee:cf:f8:a2:9f:c4:7f:ea:ef:be:97:f8:15:
         a2:8e:81:f0:fb:04:28:0c:17:b0:ec:a3:d3:f2:34:32:e4:10:
         06:da:c9:29:a8:0b:34:49:25:22:d0:1c:76:11:a5:e2:91:c9:
         d2:19:54:82:21:fc:b7:f8:65:b3:c1:5a:fb:a8:da:ea:b0:c0:
         55:ae:35:ab:b2:e6:23:79:27:5f:21:7c:01:c8:a2:d6:a4:20:
         fe:3c:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----