Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Matt/0/AS202559.asa
File:                     AS202559.asa (raw, json)
Hash identifier:          BNlwNL/7WPEeaPJ/UrexLTDgmCwNfpKWmzy6VkA8H40=
Subject key identifier:   44:32:87:5D:0D:0C:94:64:FA:CD:FE:4B:0A:A9:BC:5A:4B:02:F7:FF
Certificate issuer:       /CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
Certificate serial:       666096A098DE5B7F07414D39E8339294BA7AF1DC
Authority key identifier: 31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
Subject info access:      rsync://rpki.co/repo/Matt/0/AS202559.asa
Signing time:             Sun 16 Apr 2023 23:10:04 +0000
ASPA not before:          Sun 16 Apr 2023 23:05:04 +0000
ASPA not after:           Sun 14 Apr 2024 23:10:04 +0000
Customer ASID:            202559
Provider set:             AS: 212477

Validation:               OK
Signature path:           rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.crl
                          rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:60:96:a0:98:de:5b:7f:07:41:4d:39:e8:33:92:94:ba:7a:f1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
        Validity
            Not Before: Apr 16 23:05:04 2023 GMT
            Not After : Apr 14 23:10:04 2024 GMT
        Subject: CN=4432875D0D0C9464FACDFE4B0AA9BC5A4B02F7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:97:0a:74:be:ec:b6:c8:67:9d:20:a5:26:
                    cf:45:50:ea:85:30:8a:33:de:06:47:ab:1d:c9:34:
                    ba:66:76:17:4d:6c:4a:a4:9b:46:c2:76:bb:ed:67:
                    75:7b:51:31:ba:01:41:1e:27:ca:4c:7b:99:e3:9e:
                    21:9c:1c:2f:11:d3:f4:64:34:e5:e1:cc:a8:03:f9:
                    ba:b5:ea:a2:89:b1:75:59:32:cf:82:01:30:32:87:
                    5b:ac:b6:47:7e:57:01:d3:04:de:d9:8d:3d:fb:bd:
                    6b:b4:f9:01:67:90:0d:94:91:63:72:e9:de:ba:b3:
                    18:44:8b:1c:d1:81:9f:c3:82:00:83:c6:63:2e:34:
                    1c:14:89:22:78:17:07:96:65:82:2d:6f:50:cb:ce:
                    d6:c1:a8:ad:0b:c7:ae:69:76:f6:7a:01:0a:9d:ca:
                    50:17:7a:d6:21:48:fd:1d:d6:d0:6f:d2:f7:24:99:
                    77:69:7e:89:d2:a6:f7:b3:03:92:03:bb:bb:e3:32:
                    1e:b6:45:17:17:71:ac:0c:03:c0:84:f2:71:51:16:
                    2e:63:69:08:8f:87:1b:d6:99:a3:9f:19:71:9e:16:
                    5f:62:94:be:9c:c4:c1:cc:e9:91:61:a0:ac:90:27:
                    30:52:c0:8d:7f:b3:d6:28:5e:42:b1:75:b4:0a:81:
                    c1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:32:87:5D:0D:0C:94:64:FA:CD:FE:4B:0A:A9:BC:5A:4B:02:F7:FF
            X509v3 Authority Key Identifier: 
                keyid:31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/Matt/0/AS202559.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202559

    Signature Algorithm: sha256WithRSAEncryption
         b8:bd:01:63:aa:dd:44:99:aa:57:9d:5f:23:51:16:a5:cc:40:
         77:da:ef:d2:39:b2:b5:3d:4f:e8:43:e5:49:40:c6:32:d6:83:
         5c:d6:8b:71:55:17:d0:44:3e:48:85:ac:86:09:4d:a8:16:4d:
         66:a2:6e:b5:89:2c:9f:5b:c0:1f:24:98:45:ab:08:36:81:fc:
         82:42:d8:0b:f0:f2:fc:7f:58:51:f0:85:f4:de:69:61:9b:a8:
         fe:cc:a8:72:a9:01:fd:84:8f:c3:4a:8f:73:fe:0f:ba:9b:4e:
         b6:40:8a:d6:a3:1b:64:e9:6c:77:b9:f0:10:e7:25:17:21:00:
         fa:11:ca:ed:c4:e7:12:7b:c5:71:84:3d:0e:5c:ef:66:60:5a:
         9e:6b:92:48:b3:7d:7d:7d:30:3c:b1:47:6b:ac:bf:9b:82:a0:
         96:31:75:04:b2:ca:4a:12:b2:9e:b9:34:01:30:74:b9:f9:d6:
         16:95:47:8e:bb:cf:a1:27:2a:a7:bd:f2:c4:08:6b:1e:43:52:
         2f:65:3f:2c:69:e6:0b:19:b0:2f:f7:5a:26:83:37:f7:7c:a7:
         f2:d3:91:d6:ce:c1:73:2d:d0:0e:42:29:08:dd:5c:f3:bf:da:
         13:5f:a8:b1:48:aa:0b:8f:d1:23:7e:9d:e3:a7:51:28:c3:ac:
         93:13:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----