Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/AS18607.asa
File:                     AS18607.asa (raw, json)
Hash identifier:          UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=
Subject key identifier:   C2:60:17:75:8A:E0:27:1E:8E:6C:3A:0F:66:E1:4D:FE:6E:DC:BB:AE
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       77E94E76C3B425C01EC06E0B08EDDE43AEC834DC
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/AS18607.asa
Signing time:             Fri 17 Jan 2025 08:52:47 +0000
ASPA not before:          Fri 17 Jan 2025 08:47:47 +0000
ASPA not after:           Fri 16 Jan 2026 08:52:47 +0000
Customer ASID:            18607
Providers:                AS: 20473
                          AS: 207487
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 11:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e9:4e:76:c3:b4:25:c0:1e:c0:6e:0b:08:ed:de:43:ae:c8:34:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Jan 17 08:47:47 2025 GMT
            Not After : Jan 16 08:52:47 2026 GMT
        Subject: CN=C26017758AE0271E8E6C3A0F66E14DFE6EDCBBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:26:fc:16:c4:95:a4:eb:11:40:8d:93:78:
                    11:96:05:34:05:c1:f0:29:8a:de:d0:16:ba:2d:e8:
                    53:9d:2c:8f:e3:3d:f8:57:1d:9c:3e:ce:14:76:ab:
                    11:e2:1c:89:7b:87:1e:af:ee:36:27:fe:1d:16:65:
                    bc:1d:b6:c3:90:c1:45:6e:10:05:29:84:db:2f:a2:
                    ce:67:4b:87:1b:2f:fb:79:5b:76:68:da:cf:cd:77:
                    22:6e:b6:97:aa:2a:55:e6:27:b1:e1:d4:f7:2e:57:
                    7a:8b:fe:21:3d:44:99:d2:32:51:e0:c8:0c:ef:1d:
                    c4:0a:82:3b:01:b4:65:7d:a2:2b:a0:60:19:eb:69:
                    c1:87:ae:2d:3b:ec:05:68:6e:2f:ec:2d:ed:fc:50:
                    a8:1b:80:10:42:8a:a4:3a:8e:2c:84:3d:6c:25:23:
                    58:b7:77:76:e2:fe:88:b5:10:b4:e5:18:13:3f:8b:
                    d6:fa:88:3d:ab:76:15:f0:49:96:4b:65:bf:c8:b2:
                    6b:2d:ac:cf:76:8b:89:a8:c9:63:47:6a:b3:1f:da:
                    b6:74:14:07:70:19:6f:85:d9:99:01:34:d1:b0:a3:
                    12:4c:a5:66:8d:37:22:a1:47:e3:cf:8a:4d:72:ef:
                    c2:64:87:fb:54:ba:78:b1:c7:c4:57:dc:58:a1:b1:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:60:17:75:8A:E0:27:1E:8E:6C:3A:0F:66:E1:4D:FE:6E:DC:BB:AE
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/AS18607.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18607

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:49:c6:41:5f:5f:02:55:60:75:76:11:0a:63:d8:2c:1c:
         de:53:75:7a:bb:45:b1:72:ac:c1:71:e5:42:54:09:47:f8:c1:
         c9:07:25:7c:a2:09:8b:d7:60:38:b2:cb:eb:72:d5:1d:a1:28:
         92:00:0f:8c:6d:48:be:5d:50:da:d0:e8:7c:75:47:47:b7:cc:
         35:54:96:18:b7:84:97:8a:3d:aa:84:75:f6:cd:3c:bb:90:7e:
         b1:d2:1c:8f:e8:9b:64:b9:aa:ca:50:4a:b5:a2:11:b5:b5:c4:
         3b:8e:51:20:5e:44:e6:ef:0f:06:af:5f:19:98:3a:1e:2d:6a:
         76:78:8b:f5:e3:67:52:31:47:94:a7:c3:6c:c4:ca:78:e1:da:
         d4:c8:ec:f4:9a:f8:fb:6f:86:5b:6e:2f:22:7a:c1:ae:39:b2:
         9c:06:89:96:97:a1:4f:a0:8a:c1:93:38:2d:a0:a6:67:8a:fa:
         a2:6c:4b:2b:6c:19:88:73:1a:a4:7c:d0:0c:f8:80:fc:03:e6:
         79:20:36:da:63:08:42:24:aa:97:fc:65:55:91:83:24:ef:ea:
         77:60:1b:01:9d:e0:02:41:e9:ed:58:62:57:f1:fb:f6:21:19:
         e6:fb:8e:9e:19:35:45:b6:96:b1:e9:51:e8:bc:63:d5:2c:b3:
         13:ae:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----