Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Riffi/0/AS200579.asa
File:                     AS200579.asa (raw, json)
Hash identifier:          H3UBW9yr7rj8AGVYdQaXBRmFrRLLBw3ZbetDqcBCudM=
Subject key identifier:   A9:CD:A0:19:54:86:E4:B0:87:33:B6:E7:1C:B3:C8:80:FA:8E:C6:3E
Certificate issuer:       /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial:       4C0B4B62955FD417DAE305F2EBB0EE0BC5BEC0A9
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access:      rsync://rpki.co/repo/Riffi/0/AS200579.asa
Signing time:             Thu 13 Apr 2023 07:35:00 +0000
ASPA not before:          Thu 13 Apr 2023 07:30:00 +0000
ASPA not after:           Thu 11 Apr 2024 07:35:00 +0000
Customer AS:              200579
Provider Set:             AS: 6939
                          AS: 29632
                          AS: 34549
                          AS: 34927
                          AS: 50058
                          AS: 207656

Validation:               OK
Signature path:           rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
                          rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Apr 2023 07:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0b:4b:62:95:5f:d4:17:da:e3:05:f2:eb:b0:ee:0b:c5:be:c0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
        Validity
            Not Before: Apr 13 07:30:00 2023 GMT
            Not After : Apr 11 07:35:00 2024 GMT
        Subject: CN=A9CDA0195486E4B08733B6E71CB3C880FA8EC63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:2e:df:27:26:bf:22:db:25:72:e0:2a:ce:
                    38:a4:c4:10:3a:51:c4:3a:f5:ff:3b:e2:4f:b1:6d:
                    48:79:59:5b:ce:65:cc:01:03:22:47:33:b8:b0:aa:
                    e9:4a:af:fa:73:75:ca:b4:88:1c:dd:8c:a7:20:2c:
                    e7:de:65:ad:cf:47:41:2e:14:34:6a:28:3c:ec:b5:
                    4f:6a:2c:37:39:31:9f:3d:4e:51:3a:d5:a7:1f:7c:
                    11:97:c8:d4:0d:a5:47:6f:3b:c0:d6:45:4a:9b:90:
                    0e:fd:96:34:7b:5f:5f:cc:c7:7a:e8:f9:a6:8e:6f:
                    35:de:de:fa:75:d6:81:9e:1b:8f:fa:5e:10:f8:69:
                    cf:73:4a:76:e4:a9:4c:3c:e3:70:d8:3d:fb:09:7a:
                    47:7a:77:02:7b:79:c3:53:11:50:4c:57:3d:1a:a0:
                    45:f4:47:6a:b3:41:8a:0d:58:21:aa:8d:2b:d9:d9:
                    a9:19:37:c2:5d:d1:8d:85:e2:e8:08:6d:dd:69:5b:
                    44:2d:29:b1:b1:ec:01:ad:bd:78:51:6c:5f:66:53:
                    b4:22:79:85:20:88:e6:4c:b8:e7:52:3b:9e:00:d3:
                    7b:22:d1:08:0f:ea:b7:c0:8a:d3:cb:98:35:4b:02:
                    69:f1:11:2d:12:e8:ec:60:e8:9b:59:ab:cb:be:c1:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A9:CD:A0:19:54:86:E4:B0:87:33:B6:E7:1C:B3:C8:80:FA:8E:C6:3E
            X509v3 Authority Key Identifier: 
                keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/Riffi/0/AS200579.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200579

    Signature Algorithm: sha256WithRSAEncryption
         03:34:62:40:2a:5c:0e:6c:6f:be:75:70:96:4f:aa:71:61:1f:
         80:44:13:86:9e:d1:69:93:98:a3:4e:99:aa:16:b9:33:a4:2f:
         50:68:15:c9:d2:6c:72:93:2d:0d:0d:de:2a:9d:ce:d9:07:b9:
         03:1d:d5:9b:db:14:aa:5b:a0:cd:a0:47:ca:75:14:d6:2e:ea:
         c5:b8:c6:f1:86:5d:9a:42:02:96:e7:c7:dc:c3:fd:20:fd:18:
         17:10:db:0e:ba:eb:b3:17:cf:ec:b9:fb:2f:30:2e:61:52:de:
         8b:89:59:95:54:78:b0:72:e0:10:7f:57:1c:7e:8c:dd:44:2b:
         a5:7a:c8:4d:3a:da:cc:35:44:3e:b5:84:2c:ed:39:85:a2:74:
         77:3c:56:98:e2:63:79:aa:b9:9f:aa:80:2b:80:94:97:e5:15:
         b0:f6:d5:da:e9:8d:8b:dd:6a:8a:a9:8d:25:56:15:6d:27:2c:
         92:da:cb:9c:3b:a7:4d:d5:4f:17:b9:6f:cd:fb:30:ad:35:cd:
         2d:1d:fb:12:a9:65:4d:78:f4:2a:a0:e2:46:a5:b6:38:9d:da:
         09:c1:bd:86:6d:6c:c2:1b:75:6b:42:49:5d:75:50:1e:77:ae:
         ed:aa:bb:29:d4:8c:a1:9c:36:ac:80:6c:4e:8c:0c:54:be:1f:
         7c:37:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----