Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/AS396064.asa
File:                     AS396064.asa (raw, json)
Hash identifier:          cAeYdN5heQs8v01bwix2n+Gj5dtpfs2v8sBmWZq4WBE=
Subject key identifier:   8E:56:EA:27:86:38:04:D4:1F:47:F4:4B:A1:B4:EB:E8:25:07:71:91
Certificate issuer:       /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial:       2D9B2644A9D05E3F96C0CD7366F9BCEB5B475CFE
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/AS396064.asa
Signing time:             Thu 02 Jul 2026 16:47:36 +0000
ASPA not before:          Thu 02 Jul 2026 16:42:36 +0000
ASPA not after:           Thu 01 Jul 2027 16:47:36 +0000
Customer ASID:            396064
Providers:                AS: 835
                          AS: 1299
                          AS: 3257
                          AS: 5405
                          AS: 6204
                          AS: 6939
                          AS: 8283
                          AS: 11967
                          AS: 25091
                          AS: 37739
                          AS: 42093
                          AS: 49559
                          AS: 50263
                          AS: 50917
                          AS: 52025
                          AS: 58115
                          AS: 61049
                          AS: 64289
                          AS: 200132
                          AS: 400587
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9b:26:44:a9:d0:5e:3f:96:c0:cd:73:66:f9:bc:eb:5b:47:5c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
        Validity
            Not Before: Jul  2 16:42:36 2026 GMT
            Not After : Jul  1 16:47:36 2027 GMT
        Subject: CN=8E56EA27863804D41F47F44BA1B4EBE825077191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:0f:b0:76:8f:93:4f:29:99:be:50:12:21:
                    df:f2:02:da:fe:c5:42:09:6e:a6:94:50:cf:02:99:
                    03:e8:25:b0:8e:83:85:aa:1a:28:b2:67:25:57:59:
                    9d:c2:18:d8:2c:1f:54:9c:ad:9b:4d:a7:35:ae:dd:
                    1c:69:c7:ca:d7:12:71:12:b4:7d:01:b9:d5:54:b0:
                    95:23:09:88:d4:e9:58:46:ce:ea:4e:7d:46:ce:07:
                    20:21:7a:1b:ff:87:19:c3:69:f8:d8:fb:1c:db:c0:
                    49:03:97:79:d6:59:af:13:ec:04:a2:45:bf:f7:0e:
                    2b:11:9c:89:05:d2:0b:83:15:59:f8:9e:cc:73:e2:
                    81:f0:65:9c:8c:23:60:28:34:f5:ca:88:b1:20:58:
                    75:34:43:34:93:31:67:58:36:44:56:ae:f9:8d:a1:
                    77:6e:58:1a:8e:05:ec:ca:c1:48:9a:af:d0:33:c3:
                    de:4a:74:00:81:6c:38:4f:25:b1:57:5f:76:31:17:
                    1f:bc:10:c8:6d:72:bc:c2:bc:1d:78:03:15:bc:88:
                    58:17:f0:6c:ae:a8:29:64:11:54:2b:ee:dc:ee:34:
                    4f:1a:c3:b7:1f:f1:a0:18:57:80:85:a0:ca:0b:3f:
                    f6:46:ab:97:8b:5a:0d:25:79:a4:12:f4:7f:e6:c3:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:EA:27:86:38:04:D4:1F:47:F4:4B:A1:B4:EB:E8:25:07:71:91
            X509v3 Authority Key Identifier:
                keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/AS396064.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396064

    Signature Algorithm: sha256WithRSAEncryption
         c9:e4:27:a1:cb:c7:09:5b:6a:96:e2:46:57:a9:bc:7c:73:b5:
         a8:3d:a4:8d:eb:30:9f:7f:d3:10:5a:02:7a:f7:76:74:94:15:
         58:4c:83:0d:f0:76:36:b7:a1:fc:9c:f4:b7:51:d4:ab:05:7c:
         fe:2b:8b:da:1b:0e:32:e1:4f:e0:4a:9d:d1:7f:be:f4:c0:70:
         ea:ec:a2:5e:5d:3f:de:0e:64:e6:bd:92:b8:e7:6f:93:8b:41:
         43:8d:5c:cb:f6:38:fc:d8:b3:e4:df:bb:8f:94:fc:99:b5:5c:
         35:b8:68:81:29:b1:17:fb:d5:7f:19:8d:2f:e6:b3:cb:cf:6e:
         37:7e:ea:d2:53:85:ef:ad:8e:27:d9:c8:b4:b4:1b:72:aa:88:
         a6:9a:b1:39:a8:be:b9:58:be:c8:a5:11:80:39:69:4d:21:bc:
         df:d0:2f:f7:91:dd:a9:cf:88:f8:d9:7f:0f:e3:5c:9d:6e:17:
         88:5f:d3:fa:5e:85:2c:64:42:34:5a:6a:23:01:7e:dc:e7:c3:
         2f:b4:16:9f:13:0b:f8:d9:b7:2a:54:00:b1:b9:f7:2b:ca:c4:
         48:70:1a:f9:84:a1:d6:af:af:4a:3f:33:c4:b4:ff:f1:7d:16:
         82:de:fa:95:66:77:c0:15:06:f2:17:93:ad:f3:d5:66:8d:2f:
         5c:70:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:58:38 2026 by rpki-client