Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/fYFb1Y-NrescEZS13kBhzxAZwCo.asa
File:                     fYFb1Y-NrescEZS13kBhzxAZwCo.asa (raw, json)
Hash identifier:          PK8fg+eevsgYRUzK5CVwRm3AD9wujkCIUbycGA1SZNY=
Subject key identifier:   7D:81:5B:D5:8F:8D:AD:EB:1C:11:94:B5:DE:40:61:CF:10:19:C0:2A
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       019CB5333A59D2309915CD477B1D4E8E1A55
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/fYFb1Y-NrescEZS13kBhzxAZwCo.asa
Signing time:             Tue 03 Mar 2026 19:35:59 +0000
ASPA not before:          Tue 03 Mar 2026 19:35:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58007
Providers:                AS: 174
                          AS: 3257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b5:33:3a:59:d2:30:99:15:cd:47:7b:1d:4e:8e:1a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Mar  3 19:35:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d815bd58f8dadeb1c1194b5de4061cf1019c02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:ea:9b:50:79:56:ca:f9:31:33:12:51:a8:
                    18:ed:5e:c9:ff:1f:bd:e6:45:1a:12:8c:7b:6e:50:
                    9c:3e:0f:3f:28:85:22:1d:31:34:e4:81:e7:f5:ba:
                    ef:c1:f2:1f:09:00:8b:78:b6:cc:b4:6b:7b:8c:61:
                    5f:85:bc:c2:50:51:de:12:04:38:41:53:6d:b3:68:
                    2e:6d:52:4c:65:13:57:0a:61:c6:01:81:56:a8:b9:
                    dc:62:9d:8f:0b:bc:ab:bb:2e:0a:5d:be:df:be:67:
                    b7:4c:cc:04:8e:f4:4b:5c:76:dd:58:34:a2:2a:7d:
                    c2:62:b6:08:ba:c3:99:94:94:44:46:2a:b6:1f:dd:
                    16:af:0e:8a:f4:8d:ff:38:77:a2:08:d5:15:c0:f7:
                    2d:0c:c3:2c:e6:31:3a:90:52:53:39:48:42:b9:60:
                    5c:98:7b:4d:05:ff:28:f3:68:c3:46:71:95:8f:78:
                    06:1a:72:0f:6d:6b:55:6f:10:f6:85:b4:76:bf:00:
                    0f:35:be:f4:18:2f:e6:25:a6:cb:2b:43:3f:e2:7a:
                    49:9f:b6:9a:b7:9d:e6:c4:6c:56:92:7e:5f:d2:12:
                    1f:bb:66:14:91:11:73:97:51:4f:8e:9e:c0:15:25:
                    36:72:04:1b:a7:c2:8f:e4:65:0f:e8:a2:18:ce:64:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:81:5B:D5:8F:8D:AD:EB:1C:11:94:B5:DE:40:61:CF:10:19:C0:2A
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/fYFb1Y-NrescEZS13kBhzxAZwCo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58007

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:e1:4d:f6:77:14:63:9b:de:34:0e:33:1f:74:63:c1:55:
         6a:40:6b:f4:a7:d7:83:fe:5c:91:0c:b3:a1:a2:2a:fc:4a:19:
         2c:50:ab:18:62:0b:fe:1e:a8:66:e8:c3:0b:f2:d7:78:60:ec:
         7a:45:ce:07:5e:56:5d:86:b3:39:90:00:8c:fe:c0:a3:c0:c3:
         64:19:35:7c:b0:b4:aa:54:58:c1:0c:b4:cb:8c:3f:fa:ce:77:
         95:bc:75:cb:28:e6:05:9e:29:61:bf:f2:8d:c4:f9:d0:87:0a:
         44:5f:c6:1e:25:52:5f:e6:95:f3:90:33:6f:c2:60:a7:64:86:
         2b:29:27:13:53:8a:a3:9f:ee:07:5a:2f:b7:78:ad:e3:57:36:
         60:26:4b:c0:e6:fd:2b:b3:2a:15:55:fc:d7:c1:5e:f5:dc:c5:
         90:ab:42:85:cc:11:a9:09:bf:b1:0b:c1:f1:02:92:db:65:6d:
         ff:2a:5e:f9:2c:74:48:b4:e7:91:6f:d2:b3:74:de:7a:d1:7d:
         03:92:e3:50:07:c0:07:35:5a:1a:4c:97:fd:2d:24:2c:2a:75:
         73:6e:57:ec:50:95:de:9d:55:01:e0:65:37:50:7e:a2:8a:3b:
         d8:71:81:fd:73:80:3c:9b:d0:8c:4a:9a:5f:8b:bd:c0:49:6b:
         13:d9:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----