Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/AS945.asa
File:                     AS945.asa (raw, json)
Hash identifier:          pD2W4tKncVQM3NTtbh6qXc+KKxGe9Up8CJjCuzjg/s0=
Subject key identifier:   A5:83:A4:FA:77:D1:11:E1:6B:91:71:8F:E8:FC:9C:4C:AC:C5:15:C0
Certificate issuer:       /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial:       0B3AF39AD443EFB5F8316D0AFE9C03C432E93368
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/AS945.asa
Signing time:             Sat 14 Jun 2025 22:08:59 +0000
ASPA not before:          Sat 14 Jun 2025 22:03:59 +0000
ASPA not after:           Sat 13 Jun 2026 22:08:59 +0000
Customer ASID:            945
Providers:                AS: 13213
                          AS: 150369
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3a:f3:9a:d4:43:ef:b5:f8:31:6d:0a:fe:9c:03:c4:32:e9:33:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
        Validity
            Not Before: Jun 14 22:03:59 2025 GMT
            Not After : Jun 13 22:08:59 2026 GMT
        Subject: CN=A583A4FA77D111E16B91718FE8FC9C4CACC515C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:63:db:3d:9f:00:d0:55:b5:f0:5a:d8:82:
                    4e:c6:92:7b:42:2a:0f:13:e0:c1:54:19:4f:7a:1c:
                    0a:8a:84:55:24:69:cb:03:b4:45:1d:c6:91:a5:ba:
                    4a:52:d0:03:ac:c4:b4:b1:28:e1:bc:45:e7:73:73:
                    a4:8a:1e:f4:89:c5:83:e3:93:c4:f4:eb:8e:5c:cf:
                    11:ef:bc:18:a7:d1:a3:fe:5f:98:6b:8a:c2:2a:88:
                    46:85:08:61:e1:c5:22:55:2a:7b:4e:dd:5e:86:a9:
                    fe:a6:4f:7d:10:c6:e8:91:7f:ec:7e:25:86:53:c8:
                    8b:b5:3c:75:1a:33:29:10:c8:65:91:25:6e:e9:5a:
                    53:31:07:9d:9b:49:bd:90:7d:d3:7b:06:f5:a7:7b:
                    7f:71:39:d2:59:04:79:09:29:90:71:89:0c:22:22:
                    44:2c:65:84:68:c7:0a:5e:e2:1b:7c:91:7b:e6:e0:
                    99:17:50:03:98:06:a0:9f:f8:69:b4:0e:d1:d4:ec:
                    6f:96:fa:33:8b:11:fc:9f:9d:98:db:a7:f8:98:db:
                    89:80:2d:7a:6e:4f:67:fb:c6:f8:7f:2e:de:fa:ec:
                    65:c9:4d:1d:bc:85:de:08:51:2e:4b:8b:cf:42:cc:
                    08:c7:93:3d:7e:cd:b2:bc:13:1b:af:97:0a:f3:f0:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:83:A4:FA:77:D1:11:E1:6B:91:71:8F:E8:FC:9C:4C:AC:C5:15:C0
            X509v3 Authority Key Identifier:
                keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/AS945.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:2f:31:82:27:f6:3d:0b:33:93:d8:d2:63:5a:08:c1:79:
         57:65:17:d4:db:6d:27:77:8d:75:fd:b9:8b:36:0b:8b:4f:b1:
         3e:d6:3f:88:d2:90:ec:45:e5:3d:f8:ae:69:a8:97:a1:01:38:
         b4:9f:3e:c0:46:1f:1d:88:16:d8:58:cf:f4:6f:50:32:4d:6d:
         15:0a:ea:76:c7:fb:73:98:75:fe:d3:c5:e3:0e:94:41:36:50:
         2f:38:70:21:11:f6:d5:19:9c:1e:3d:09:09:94:0b:33:dc:48:
         9f:2e:d0:2b:97:d4:72:5b:66:63:e1:fc:bc:1c:dc:8b:ed:8f:
         49:45:e7:da:f7:47:db:b1:5f:8c:56:9b:65:74:e2:ae:3b:89:
         3c:4b:7d:ba:a8:2e:5a:7d:0f:0d:16:03:86:4f:d7:59:8f:19:
         07:c5:7c:6f:fa:4b:3c:d9:86:35:6f:fe:ea:bd:82:8d:7c:36:
         46:71:22:f3:8e:23:62:65:1d:89:7e:16:8a:da:18:0e:49:52:
         09:fb:22:02:d9:34:45:89:47:7e:42:0d:06:72:2d:f9:b9:09:
         6d:f4:fe:41:85:73:63:ad:cc:a4:e0:a0:9d:66:fa:c8:e4:ad:
         b1:a3:70:f2:cc:6e:48:d9:35:f2:c7:60:0e:12:97:8d:d4:6b:
         fe:e8:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:38:30 2025 by rpki-client