Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/AS151642.asa
File:                     AS151642.asa (raw, json)
Hash identifier:          /KT8hFVY+tXMdkF8LScuAiNuIQBToUCcd1IrQ4Lb3j0=
Subject key identifier:   9E:50:5E:2C:61:1F:D0:90:70:B6:0A:E3:54:6B:74:FE:2B:A9:EF:CE
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       75B44826BA6CB974EF7839405B580D1D9CD46A08
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/AS151642.asa
Signing time:             Mon 19 May 2025 06:32:48 +0000
ASPA not before:          Mon 19 May 2025 06:27:48 +0000
ASPA not after:           Mon 18 May 2026 06:32:48 +0000
Customer ASID:            151642
Providers:                AS: 20473
                          AS: 61138
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 03:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b4:48:26:ba:6c:b9:74:ef:78:39:40:5b:58:0d:1d:9c:d4:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: May 19 06:27:48 2025 GMT
            Not After : May 18 06:32:48 2026 GMT
        Subject: CN=9E505E2C611FD09070B60AE3546B74FE2BA9EFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:d6:18:c7:7e:66:67:9c:8e:7a:bc:39:a4:
                    a0:e7:93:a2:4e:ec:80:0e:1e:6a:45:89:3c:d0:84:
                    07:f0:7c:3a:dc:b2:fd:e0:bc:f4:72:29:59:48:4b:
                    6b:8e:e2:f2:59:94:88:c1:df:91:e3:c7:d1:ce:d0:
                    df:4e:af:4d:d1:17:39:9f:06:a1:70:c5:f8:1e:79:
                    51:0c:73:3c:77:1b:e1:22:ce:41:d8:59:75:42:61:
                    b3:f9:ab:92:20:9a:25:e3:88:5a:8a:97:45:2b:92:
                    c9:33:50:7a:8c:b8:65:d1:0f:5c:89:99:4b:7a:93:
                    c0:64:62:1c:62:53:5b:cd:3e:b8:8b:4b:0c:bb:37:
                    8c:84:d4:46:4a:d6:07:22:1f:8f:37:e4:fa:8b:ce:
                    f2:cf:ab:93:e6:8b:48:94:36:42:b0:f4:64:77:46:
                    ea:71:88:5e:02:24:d7:ad:3b:af:a3:3d:76:6e:b3:
                    7b:82:d6:88:d9:b3:d8:f7:ac:c1:62:76:ee:4c:9c:
                    ea:7c:51:eb:4b:11:d8:be:3b:f0:ac:18:0f:75:2c:
                    5e:82:0b:3c:6c:c6:c6:6d:63:9a:1a:d1:1d:da:3d:
                    6d:22:16:93:c4:7e:87:6d:63:81:9f:68:c2:ed:46:
                    62:f1:89:c0:7b:8b:cb:89:9e:b4:5a:fb:42:61:10:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:50:5E:2C:61:1F:D0:90:70:B6:0A:E3:54:6B:74:FE:2B:A9:EF:CE
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/AS151642.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151642

    Signature Algorithm: sha256WithRSAEncryption
         bc:36:13:7b:86:ee:7c:80:44:b8:47:cc:64:09:a2:cd:de:ad:
         1d:0a:94:b4:dc:89:68:6f:4d:c9:e6:45:9a:89:14:65:f2:32:
         24:7a:71:fd:a9:03:2c:5e:4d:bb:84:f1:f8:d4:ae:07:46:9e:
         d7:86:dd:23:b9:06:a7:77:ca:75:71:95:84:65:6a:61:71:af:
         e6:61:25:08:cb:49:cd:f3:f4:3d:4a:cc:61:3d:28:e7:e1:8f:
         7e:4e:3f:51:c4:92:c8:d6:a4:f9:02:89:81:ea:87:1b:92:9b:
         99:07:0a:06:36:48:34:69:da:fa:c6:f5:fe:f4:ea:b3:7e:bc:
         a1:fd:04:cd:06:75:b4:f6:16:63:04:9d:14:8a:ff:30:ed:46:
         70:b0:ad:d4:cb:b5:a1:fe:98:83:2c:e4:17:49:79:b1:22:41:
         21:2a:93:dc:1e:4f:5a:b5:d6:7c:20:75:9b:e8:d2:56:0a:74:
         c0:4e:9c:bf:04:c8:3f:1c:73:e4:9c:18:08:53:94:51:61:1e:
         c7:64:b0:bd:dc:21:d7:fe:eb:e4:2b:a7:74:94:ca:01:87:41:
         05:92:30:c7:07:90:2f:82:31:70:2b:fd:45:7f:e7:ec:fe:b2:
         bc:aa:b9:f9:59:30:e6:e1:7b:f7:2d:4e:86:3d:55:bf:44:01:
         a5:f3:5b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:03:12 2025 by rpki-client