Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/AS202400.asa
File:                     AS202400.asa (raw, json)
Hash identifier:          q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=
Subject key identifier:   10:9B:83:72:61:E3:21:C5:0B:99:11:98:09:E5:D5:14:26:5F:33:03
Certificate issuer:       /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial:       4022401A9B70089F75E13680A693BEC6BD19822F
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/AS202400.asa
Signing time:             Mon 23 Mar 2026 06:18:40 +0000
ASPA not before:          Mon 23 Mar 2026 06:13:40 +0000
ASPA not after:           Mon 22 Mar 2027 06:18:40 +0000
Customer ASID:            202400
Providers:                AS: 32595
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:40:1a:9b:70:08:9f:75:e1:36:80:a6:93:be:c6:bd:19:82:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
        Validity
            Not Before: Mar 23 06:13:40 2026 GMT
            Not After : Mar 22 06:18:40 2027 GMT
        Subject: CN=109B837261E321C50B99119809E5D514265F3303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:5c:e3:9a:16:a7:4a:46:fc:51:99:ab:ad:
                    5b:a8:3d:c2:7f:63:9b:53:a7:f7:01:2f:90:18:4c:
                    e2:7f:71:ff:b1:4e:3c:49:59:ae:1b:25:4a:cd:38:
                    96:54:5b:c9:6c:7e:b5:b2:30:8a:0b:60:df:fb:0e:
                    cb:11:a1:a0:e0:2b:32:49:44:2e:44:91:f1:89:10:
                    0c:51:5e:46:7d:82:ea:df:be:8a:88:48:5e:cc:9e:
                    77:88:a5:45:10:a3:79:00:9f:f4:5f:43:56:ac:71:
                    7b:34:86:08:11:b5:21:fc:d9:1f:01:8c:21:ab:54:
                    f1:02:c4:5a:dc:f3:00:17:f2:f9:47:64:0d:8c:67:
                    58:18:d5:57:74:2a:18:f4:a2:70:e0:11:88:79:5b:
                    f0:a5:34:e5:d5:7d:90:d0:bc:cc:7b:d8:dd:38:9f:
                    90:5d:05:64:bd:60:b1:4d:92:a6:6d:fd:02:06:86:
                    f2:2c:ef:c3:75:26:81:48:a0:bf:ea:67:40:42:38:
                    97:e0:9b:94:96:71:90:7f:21:6b:76:a3:6e:ab:a4:
                    8e:b3:5c:ce:75:f6:df:61:08:c6:81:3e:04:83:3a:
                    e7:da:9b:7d:09:5e:8d:60:83:4d:2d:aa:7c:26:37:
                    5f:93:17:82:c2:58:a4:94:00:81:79:23:7d:8e:2b:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:83:72:61:E3:21:C5:0B:99:11:98:09:E5:D5:14:26:5F:33:03
            X509v3 Authority Key Identifier:
                keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/AS202400.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202400

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:5b:15:05:56:1d:ae:be:53:8f:ca:67:5b:f7:4e:38:b9:
         b0:56:44:44:20:2c:39:96:87:27:06:47:65:c9:5e:47:0f:3c:
         ad:9d:b9:c6:0a:c9:7c:6b:ab:35:72:78:e8:ed:a7:30:c7:4e:
         58:50:d5:37:42:93:ca:58:00:7b:04:2e:53:3d:fe:a2:a1:7f:
         49:cd:69:65:15:b0:6e:e6:c6:f0:6a:bc:41:5d:33:93:8c:20:
         53:eb:5a:2f:c1:91:06:c6:2b:32:d8:5d:d6:6c:75:06:32:cd:
         54:58:6c:7b:a6:70:0c:4d:fc:93:07:e2:78:39:18:e4:a5:aa:
         2c:79:12:bd:da:46:6a:4c:74:47:5e:83:3e:02:5b:21:7e:c5:
         91:ce:ea:9d:a8:de:e2:f7:9b:e2:71:d2:08:59:ef:d2:ca:56:
         a7:e2:9e:e2:88:a1:87:2d:67:cf:35:0c:a2:a7:53:c6:4f:ee:
         d7:49:39:33:74:3a:87:1a:6c:4b:2e:ed:6a:3d:b0:70:28:00:
         05:05:4f:c1:4a:d2:4d:83:20:cb:20:db:11:ef:5f:6f:7c:c5:
         12:fa:16:3d:24:b8:80:ac:ea:85:c3:65:f5:e1:d1:40:08:96:
         0c:b8:98:4f:4c:3f:83:fd:c4:11:b1:de:b9:6a:53:c1:c0:38:
         d5:d6:c6:f9
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUQCJAGptwCJ914TaAppO+xr0Zgi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcwN2FjMmVjZTczZTUwYzllYWUyZmYwODZmMjRkNDVh
ODE3NWI3YjAeFw0yNjAzMjMwNjEzNDBaFw0yNzAzMjIwNjE4NDBaMDMxMTAvBgNV
BAMTKDEwOUI4MzcyNjFFMzIxQzUwQjk5MTE5ODA5RTVENTE0MjY1RjMzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGVzjmhanSkb8UZmrrVuoPcJ/
Y5tTp/cBL5AYTOJ/cf+xTjxJWa4bJUrNOJZUW8lsfrWyMIoLYN/7DssRoaDgKzJJ
RC5EkfGJEAxRXkZ9gurfvoqISF7MnneIpUUQo3kAn/RfQ1ascXs0hggRtSH82R8B
jCGrVPECxFrc8wAX8vlHZA2MZ1gY1Vd0Khj0onDgEYh5W/ClNOXVfZDQvMx72N04
n5BdBWS9YLFNkqZt/QIGhvIs78N1JoFIoL/qZ0BCOJfgm5SWcZB/IWt2o26rpI6z
XM519t9hCMaBPgSDOufam30JXo1gg00tqnwmN1+TF4LCWKSUAIF5I32OK+a/AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUEJuDcmHjIcULmRGYCeXVFCZfMwMwHwYDVR0j
BBgwFoAUNwesLs5z5Qyeri/whvJNRagXW3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NzI4OTg4ODAxODc2MDJhNTBhMDM5MTAvMi8zNzA3QUMyRUNF
NzNFNTBDOUVBRTJGRjA4NkYyNEQ0NUE4MTc1QjdCLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvTndlc0xzNXo1UXllcmlfd2h2Sk5SYWdYVzNzLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYwMmE1MGEwMzkxMC8yL0FT
MjAyNDAwLmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwMWoDANBgkqhkiG9w0BAQsFAAOCAQEAocVbFQVWHa6+U4/K
Z1v3Tji5sFZERCAsOZaHJwZHZcleRw88rZ25xgrJfGurNXJ46O2nMMdOWFDVN0KT
ylgAewQuUz3+oqF/Sc1pZRWwbubG8Gq8QV0zk4wgU+taL8GRBsYrMthd1mx1BjLN
VFhse6ZwDE38kwfieDkY5KWqLHkSvdpGakx0R16DPgJbIX7Fkc7qnaje4veb4nHS
CFnv0spWp+Ke4oihhy1nzzUMoqdTxk/u10k5M3Q6hxpsSy7taj2wcCgABQVPwUrS
TYMgyyDbEe9fb3zFEvoWPSS4gKzqhcNl9eHRQAiWDLiYT0w/g/3EEbHeuWpTwcA4
1dbG+Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:51 2026 by rpki-client