Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/AS60900.asa
File:                     AS60900.asa (raw, json)
Hash identifier:          dCbHK8QnJn0GjfqUYkqvzSYjLA92Os/T9LYyF/At47k=
Subject key identifier:   02:B2:CB:42:ED:66:57:A0:0B:DD:6B:E4:1C:3B:89:13:86:93:DF:62
Certificate issuer:       /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial:       0258E677497DC8BA247B11643E62A36E6230AB74
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/AS60900.asa
Signing time:             Thu 12 Mar 2026 17:45:37 +0000
ASPA not before:          Thu 12 Mar 2026 17:40:37 +0000
ASPA not after:           Thu 11 Mar 2027 17:45:37 +0000
Customer ASID:            60900
Providers:                AS: 701
                          AS: 6939
                          AS: 8860
                          AS: 13335
                          AS: 14618
                          AS: 20473
                          AS: 34927
                          AS: 37988
                          AS: 41051
                          AS: 44324
                          AS: 50224
                          AS: 53667
                          AS: 60841
                          AS: 137409
                          AS: 142064
                          AS: 202142
                          AS: 205329
                          AS: 208453
                          AS: 209533
                          AS: 210667
                          AS: 213605
                          AS: 214150
                          AS: 214331
                          AS: 214757
                          AS: 214809
                          AS: 396993
                          AS: 399486
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:58:e6:77:49:7d:c8:ba:24:7b:11:64:3e:62:a3:6e:62:30:ab:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
        Validity
            Not Before: Mar 12 17:40:37 2026 GMT
            Not After : Mar 11 17:45:37 2027 GMT
        Subject: CN=02B2CB42ED6657A00BDD6BE41C3B89138693DF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:5e:d0:8e:45:1b:7d:53:48:7a:c5:8c:e3:
                    da:b3:e4:a6:7d:02:5d:64:4c:5f:b8:f6:09:39:98:
                    13:15:46:1b:71:04:35:83:5c:e0:1c:e1:e1:4e:59:
                    cd:86:4b:3a:80:4d:12:5e:00:e2:9f:9e:38:0e:59:
                    34:d8:7f:2d:d1:dc:df:98:df:73:cf:4f:a9:1a:12:
                    c9:e9:61:ae:3b:5c:df:1a:c0:92:75:b7:f0:4d:bb:
                    5d:67:97:b3:64:16:dc:5c:77:0b:53:73:ec:d6:0b:
                    af:4b:59:3d:f7:65:a6:6c:40:5c:0c:bc:fd:63:ff:
                    6b:4d:d8:e7:54:d0:cd:b3:89:f1:ae:74:c0:65:99:
                    54:6c:7b:7b:ee:e6:f5:25:22:13:ae:62:22:35:90:
                    2b:2d:1d:dd:8b:4a:9a:d3:04:8f:9e:28:15:2d:b5:
                    11:8d:41:f5:21:7b:81:35:b8:da:37:b3:08:27:ce:
                    1a:ee:4b:b6:37:10:d3:66:03:a9:50:9a:86:4b:68:
                    7f:2c:7c:2b:1d:cd:5e:e4:6e:d8:78:88:f8:55:13:
                    1f:12:e8:a7:f9:f7:9d:52:99:f2:e5:09:01:6b:f5:
                    c0:2b:ac:0b:f0:c4:75:22:04:2c:9e:c9:ff:9d:d6:
                    df:33:ab:32:26:96:0c:e8:21:7a:c5:fd:44:53:40:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B2:CB:42:ED:66:57:A0:0B:DD:6B:E4:1C:3B:89:13:86:93:DF:62
            X509v3 Authority Key Identifier:
                keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/AS60900.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60900

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:82:28:3c:9a:aa:28:3c:2a:cf:c1:5b:9f:40:2e:36:f7:
         25:43:2f:41:b2:87:66:bc:98:79:03:43:44:c1:c4:03:9d:57:
         27:80:ec:c2:5e:73:74:5f:82:1b:b2:c2:d9:7e:40:a1:2b:9b:
         c2:eb:b7:d2:bd:8e:e5:e0:ee:39:6d:bd:fd:24:ea:93:05:ef:
         10:bd:7c:3b:0e:39:c3:c6:2e:a4:4f:bf:87:f8:25:ec:cf:a8:
         53:54:18:be:a2:db:fd:a0:d1:22:df:7a:63:86:2b:d8:f5:c0:
         23:cc:35:78:0c:38:23:3e:8b:7d:72:5f:fe:5d:a6:ec:e4:1b:
         59:cc:92:85:be:d4:c4:57:f2:6e:10:d8:b0:e7:80:58:ee:a5:
         9f:43:eb:73:7a:af:a8:1f:11:c9:b8:cc:69:22:d0:9e:30:19:
         b2:4a:53:47:72:f1:0c:80:d8:bc:76:2b:dd:2a:b4:be:33:a3:
         44:71:b2:ba:2c:5f:73:16:44:0c:84:19:06:89:96:be:b9:81:
         b8:a6:0b:e9:b8:84:e7:5a:f8:06:51:10:97:2a:8e:db:3e:78:
         f6:d6:2e:ba:ae:33:e8:1e:98:72:2c:05:21:66:35:2a:8a:b4:
         ab:a8:98:5e:6e:56:f9:47:ad:6a:bf:e8:5e:a5:e5:ab:63:10:
         8b:18:1d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:39 2026 by rpki-client