Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/AS214701.asa
File:                     AS214701.asa (raw, json)
Hash identifier:          h7Wrg67TmClaqULNaqcHtma2p64TKkbxqfig9hQ2iG8=
Subject key identifier:   2F:88:81:68:3B:1E:9E:C7:74:EB:87:88:DA:A2:E7:11:F4:A2:DA:F3
Certificate issuer:       /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial:       57605C123622FFF7D37ED0ED35FF6A4A0B062143
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/AS214701.asa
Signing time:             Sat 22 Feb 2025 00:04:42 +0000
ASPA not before:          Fri 21 Feb 2025 23:59:42 +0000
ASPA not after:           Sat 21 Feb 2026 00:04:42 +0000
Customer ASID:            214701
Providers:                AS: 20473
                          AS: 34927
                          AS: 39351
                          AS: 51519
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Mar 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:5c:12:36:22:ff:f7:d3:7e:d0:ed:35:ff:6a:4a:0b:06:21:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
        Validity
            Not Before: Feb 21 23:59:42 2025 GMT
            Not After : Feb 21 00:04:42 2026 GMT
        Subject: CN=2F8881683B1E9EC774EB8788DAA2E711F4A2DAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:8a:ab:b3:72:72:37:5e:e2:9d:60:f3:61:
                    a6:42:69:86:88:76:cb:b4:26:97:6a:7c:81:96:14:
                    6f:dc:60:f8:ce:76:0a:17:6e:d9:06:4c:81:c8:95:
                    ed:a6:ff:42:cc:ba:fe:a8:dc:a9:37:bc:ab:3a:3d:
                    81:35:a5:f0:64:d5:82:de:1f:dc:5a:f1:41:a9:95:
                    95:da:71:e9:47:47:2b:b6:2c:30:a5:8c:25:3f:ec:
                    57:be:2c:c3:58:a6:00:2d:9c:2e:a9:10:7c:c5:a5:
                    ad:2d:9d:0c:e7:34:6e:af:34:4d:de:79:f3:d4:85:
                    12:f7:0e:32:3a:c2:a8:a8:a7:0e:58:0c:46:53:f5:
                    a5:5b:0b:ab:05:93:a8:c3:08:ff:a8:c9:f2:82:ad:
                    2d:a4:8f:f1:ee:bc:57:fc:d4:b6:59:c3:b9:ee:31:
                    fc:9e:f9:18:56:d6:dd:a9:e5:87:89:24:69:48:34:
                    78:7b:1c:5b:87:28:87:bd:9e:7d:91:08:62:e3:ec:
                    5d:9f:81:df:b0:10:ae:e9:1d:f1:04:22:b6:8f:dc:
                    4f:34:7f:32:1e:ae:df:6f:f0:84:a7:bb:f2:d8:45:
                    cb:6f:6c:07:65:67:ac:3f:ac:ab:50:e1:1b:9a:1e:
                    cb:a4:03:bb:d3:3f:4b:f3:0d:97:69:90:5b:94:44:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:88:81:68:3B:1E:9E:C7:74:EB:87:88:DA:A2:E7:11:F4:A2:DA:F3
            X509v3 Authority Key Identifier:
                keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/AS214701.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214701

    Signature Algorithm: sha256WithRSAEncryption
         da:b2:4f:db:c3:7f:8a:62:ae:0a:16:36:f2:49:c9:99:67:b7:
         e7:a5:35:e0:96:4f:e6:e1:c2:b4:b7:e4:8e:92:99:ee:68:30:
         4d:fc:2f:7c:d5:10:b7:66:8c:8f:66:fe:04:24:87:6b:0e:57:
         9b:d2:50:e2:96:74:ad:41:1a:ac:e1:cd:26:5d:d4:30:4f:32:
         d3:9e:92:3c:5f:3c:91:a3:82:da:9b:5f:60:9f:36:72:0d:8f:
         80:fa:b7:e9:fa:44:e0:42:b4:de:7c:dc:0f:00:7a:da:fb:0d:
         0b:b2:0d:8c:25:d8:cc:86:f3:3b:51:ca:e4:c8:c9:29:06:9a:
         90:dc:82:79:e4:5c:d9:96:a8:5d:2a:fa:b2:1e:36:0f:88:f7:
         88:1b:43:ac:7c:53:97:fc:0f:79:ab:1a:ae:ce:d0:c9:d2:11:
         e8:7e:c0:fa:d1:61:67:5c:47:f5:3d:3c:85:9f:d3:25:de:d7:
         50:3d:b6:53:ec:d4:6e:0c:eb:a3:17:63:bb:c9:70:08:8e:d2:
         2b:e0:04:69:83:6b:6b:76:86:57:82:7b:51:19:f2:29:4b:83:
         da:06:40:55:75:3f:5b:55:f9:e6:75:67:46:46:f1:a9:ca:82:
         02:6a:72:44:6b:04:6f:91:c6:5c:51:6c:b7:f8:db:25:20:17:
         58:38:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----