Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS214498.asa
File:                     AS214498.asa (raw, json)
Hash identifier:          zpKZ3xz417Eo2EM0m+2UqZcFmQBYd5gW7ig2wKkC7zE=
Subject key identifier:   FB:F7:A9:A9:8C:E7:75:07:22:93:82:60:DE:D1:49:E1:1E:F2:9C:C9
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       0A4DAA21B3C9070768B1060B91FE4EF957016DE7
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS214498.asa
Signing time:             Fri 20 Dec 2024 11:49:51 +0000
ASPA not before:          Fri 20 Dec 2024 11:44:51 +0000
ASPA not after:           Fri 19 Dec 2025 11:49:51 +0000
Customer ASID:            214498
Providers:                AS: 16276
                          AS: 207841
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4d:aa:21:b3:c9:07:07:68:b1:06:0b:91:fe:4e:f9:57:01:6d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Dec 20 11:44:51 2024 GMT
            Not After : Dec 19 11:49:51 2025 GMT
        Subject: CN=FBF7A9A98CE7750722938260DED149E11EF29CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:fb:ec:d3:0d:4e:68:5a:88:f9:53:17:9a:
                    9d:f9:a1:da:c1:cb:e0:c6:78:21:41:81:83:35:f9:
                    05:fc:33:64:71:7e:87:97:db:02:41:0a:62:e2:c5:
                    28:d8:52:2c:a4:a2:3b:74:0e:bc:da:67:f1:eb:1e:
                    05:42:aa:f5:63:0c:f9:85:ec:e3:9c:a6:6b:8a:b2:
                    b0:92:7a:4e:3c:6d:5e:95:12:79:44:09:e6:08:49:
                    92:2f:be:95:d6:be:6e:0e:96:5e:88:8a:67:a2:32:
                    62:7a:87:36:96:0a:55:34:ef:e3:c0:15:0f:58:a2:
                    5d:d6:26:4f:cc:41:9a:14:17:b3:67:62:84:0d:9f:
                    c5:6d:84:fd:9c:ba:8f:35:3a:70:5b:79:4a:2f:e5:
                    e7:9d:02:d6:0c:2f:6f:44:13:cf:ac:77:cf:11:cb:
                    98:20:06:71:29:46:86:ae:c1:40:c0:8c:06:3f:7f:
                    76:a3:b9:3c:d3:31:86:c8:5e:be:14:ee:d2:c7:98:
                    c9:21:60:8d:b3:a9:9a:ee:e6:a7:5a:2a:8d:16:35:
                    42:6b:b5:04:4b:6a:cc:04:c8:ff:44:ae:d3:9d:ad:
                    f8:ee:d7:4a:77:51:5b:fe:53:a3:6a:a6:95:0d:bd:
                    50:f4:89:3e:87:92:3e:31:57:60:7f:c6:7d:c4:fc:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:A9:A9:8C:E7:75:07:22:93:82:60:DE:D1:49:E1:1E:F2:9C:C9
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS214498.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214498

    Signature Algorithm: sha256WithRSAEncryption
         85:e9:b0:e7:7b:f6:83:db:2d:b7:43:17:d0:ca:6b:fb:51:7f:
         76:83:c1:6f:3e:eb:83:2a:63:d8:e9:0e:32:a5:66:ca:a2:b8:
         3d:48:d4:5a:02:6e:2b:92:2a:8b:37:e8:11:e7:cb:1b:4f:e6:
         d6:20:4e:b7:e6:4b:6e:1a:b3:27:21:79:c0:6f:90:e9:da:93:
         6f:da:98:20:8f:f8:c2:21:2e:8c:10:2a:0f:96:ec:2b:48:8f:
         d7:e4:ca:56:81:d3:11:84:4f:1e:cd:8b:d9:19:be:b6:a5:0e:
         73:07:eb:f0:eb:8e:12:0a:1f:45:93:86:10:f5:ab:6a:4a:b8:
         a3:f0:48:83:44:b3:4a:41:52:22:ca:5f:f7:85:18:9b:c8:ea:
         72:05:2b:62:1a:92:1f:ef:3a:1f:de:d2:af:c0:6a:6e:32:fc:
         7c:90:f9:2a:f5:e5:ab:cc:11:95:62:6b:37:7d:7f:b5:89:72:
         52:54:16:34:55:d3:52:9d:fe:da:e3:27:54:4f:e5:59:fb:51:
         4d:42:2c:a3:ac:72:ee:5d:79:75:df:68:2a:20:55:bd:19:3c:
         01:46:a6:fd:36:3c:a1:b9:ae:e6:c7:32:bb:0b:60:3e:8d:d6:
         6e:4b:09:6c:a7:da:d4:9b:e5:8d:f1:88:85:3c:6e:8a:0a:5a:
         15:d3:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----