Autonomous System Provider Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/AS149301.asa
File:                     AS149301.asa (raw, json)
Hash identifier:          KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=
Subject key identifier:   8D:F4:E7:C9:08:A4:21:86:48:6B:4C:14:96:20:C3:9E:15:3F:58:CC
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       41F2F73415A493F2328B43FCBC3FE385D507BD00
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/AS149301.asa
Signing time:             Mon 19 May 2025 06:32:49 +0000
ASPA not before:          Mon 19 May 2025 06:27:49 +0000
ASPA not after:           Mon 18 May 2026 06:32:49 +0000
Customer ASID:            149301
Providers:                AS: 20473
                          AS: 61138
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 02:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f2:f7:34:15:a4:93:f2:32:8b:43:fc:bc:3f:e3:85:d5:07:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: May 19 06:27:49 2025 GMT
            Not After : May 18 06:32:49 2026 GMT
        Subject: CN=8DF4E7C908A42186486B4C149620C39E153F58CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5b:4b:98:c6:c9:7a:14:3d:df:7d:c9:7d:25:
                    04:ac:25:9e:6b:eb:8f:b7:8f:04:2e:b6:e4:c9:be:
                    31:b5:dc:d1:f5:c0:cd:ac:53:ff:c5:c5:04:90:c3:
                    54:ab:c9:74:04:98:cf:99:54:4b:dc:c3:8c:f1:92:
                    3e:ef:58:e9:5d:2a:a6:78:54:5c:84:00:52:e2:21:
                    c8:c8:72:80:84:32:26:97:52:8d:f2:3c:7a:df:e6:
                    aa:7e:8a:ff:9b:2a:ba:38:52:33:01:73:f7:66:d6:
                    01:4f:d8:6f:37:b3:ee:6d:5a:b7:a1:45:9f:92:46:
                    9c:e1:0e:fe:81:02:cb:28:64:7d:57:76:d5:15:d8:
                    d6:73:91:bb:db:b3:89:00:d5:d0:22:6f:ad:98:c0:
                    7a:89:7a:fa:6c:cb:fe:27:f9:f8:91:dd:55:c6:95:
                    87:04:45:e3:00:25:55:53:f4:1e:b2:6a:cc:4b:ad:
                    55:64:1b:78:24:dd:4a:ae:98:c3:71:64:f9:b0:e8:
                    b0:6c:8f:e6:21:0c:0b:35:4c:9c:3b:68:b9:7c:8e:
                    db:b7:92:53:26:eb:cf:d1:27:80:b1:b2:f0:ee:14:
                    40:d9:f8:d4:d1:63:66:d8:09:8e:f7:ed:73:4d:39:
                    4f:fe:fb:56:20:e5:0c:d9:fa:42:85:10:20:4f:99:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:E7:C9:08:A4:21:86:48:6B:4C:14:96:20:C3:9E:15:3F:58:CC
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/AS149301.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149301

    Signature Algorithm: sha256WithRSAEncryption
         10:26:0c:99:33:46:e9:65:e5:5b:56:43:9f:1c:44:91:dd:93:
         c0:91:ba:f9:66:54:be:2e:0a:4e:4b:76:2f:b0:5f:e8:f0:00:
         23:9d:9f:91:01:93:60:20:73:a1:a1:fe:81:69:28:e4:5d:38:
         ef:f0:a1:31:a1:7c:3e:ec:a3:7c:15:32:6f:8e:e7:b6:cc:02:
         8a:f5:8b:ba:73:3b:75:cf:ce:e4:46:36:49:83:52:8c:78:24:
         76:c9:74:12:4c:3b:b0:a9:f3:ae:dd:19:ba:4b:26:90:b9:6b:
         af:3f:40:68:08:83:00:e3:4b:52:4f:66:45:4f:cd:9b:37:30:
         44:a2:b9:39:2e:65:2f:ff:79:c6:49:97:f7:ec:e1:5a:58:27:
         04:82:d9:95:9e:30:80:84:25:20:0f:99:7c:b1:48:14:10:5e:
         27:67:e5:a8:16:9f:60:75:3d:e6:38:48:9f:90:12:26:02:a1:
         b7:88:d9:3c:e8:f3:33:09:82:fb:f9:90:56:82:5a:b6:74:af:
         91:24:f5:95:c4:81:aa:a5:fb:86:9b:c0:d0:4a:d2:01:2e:b9:
         dc:93:21:40:77:b6:8a:53:94:c9:02:88:16:ad:47:ae:7d:9a:
         3a:fb:de:72:0a:66:cd:4c:f1:9c:b8:c0:26:07:23:dd:c0:22:
         84:e8:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:44 2025 by rpki-client