Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/PuPGYI3AD64wjFKrjsvTXMK3F3Y.asa
File:                     PuPGYI3AD64wjFKrjsvTXMK3F3Y.asa (raw, json)
Hash identifier:          pxQzj2AvHigk+PTnXI/Bxg/3cVEcpO9mX6pPixzHeUk=
Subject key identifier:   3E:E3:C6:60:8D:C0:0F:AE:30:8C:52:AB:8E:CB:D3:5C:C2:B7:17:76
Certificate issuer:       /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial:       019EA98C1A617DDADF5CB105CBC1DD5A54A6
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/PuPGYI3AD64wjFKrjsvTXMK3F3Y.asa
Signing time:             Mon 08 Jun 2026 23:23:11 +0000
ASPA not before:          Mon 08 Jun 2026 23:23:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200841
Providers:                AS: 12189
                          AS: 20473
                          AS: 26042
                          AS: 34927
                          AS: 52025
                          AS: 53667
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a9:8c:1a:61:7d:da:df:5c:b1:05:cb:c1:dd:5a:54:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd0413c6e4482527651431211138838e133854de
        Validity
            Not Before: Jun  8 23:23:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3ee3c6608dc00fae308c52ab8ecbd35cc2b71776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:6e:24:29:fa:ca:8f:a5:9d:1d:3d:91:41:
                    db:b6:15:0a:a9:18:25:f0:89:9c:15:a1:b6:e2:9d:
                    e6:71:3c:7a:28:ae:ee:f2:13:65:db:bc:ed:84:a5:
                    8b:47:f1:c1:e8:30:97:ee:14:5c:63:69:b0:85:04:
                    ec:ce:93:50:fb:35:48:ef:78:45:9b:c7:fa:11:6d:
                    b7:3f:e7:71:39:5e:33:f7:13:60:03:88:31:7f:19:
                    94:87:21:e1:55:1d:0f:fa:5d:fc:b0:53:3e:97:8f:
                    5a:3a:ab:79:8f:1e:bc:d2:26:a4:88:e9:b8:bc:5b:
                    ec:85:1f:f9:10:4b:65:95:c0:eb:9a:52:26:fc:7c:
                    64:45:7e:14:9d:69:1a:bc:42:e5:26:a1:11:74:d2:
                    59:09:70:7f:81:f0:63:87:9a:7f:2c:59:ba:d9:d4:
                    03:3c:fd:bd:46:5e:e8:44:e4:82:63:59:4c:ba:88:
                    32:9d:c6:96:07:d8:f0:4a:c9:d0:3d:ab:22:af:3e:
                    d2:92:70:e8:35:da:25:18:43:f4:11:37:eb:fb:bf:
                    85:10:98:47:ef:aa:23:bd:e9:2f:a2:23:e8:19:2e:
                    b9:20:f4:3c:dc:eb:e7:50:ff:c3:e7:97:0b:28:7b:
                    96:a4:22:9d:b8:d9:43:f8:44:6b:25:63:c2:82:72:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E3:C6:60:8D:C0:0F:AE:30:8C:52:AB:8E:CB:D3:5C:C2:B7:17:76
            X509v3 Authority Key Identifier:
                keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/PuPGYI3AD64wjFKrjsvTXMK3F3Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200841

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:3a:27:a1:81:e4:da:68:df:c4:4f:20:48:b1:53:49:3c:
         1f:4b:c5:00:a9:58:45:3e:d7:2a:d6:70:85:1f:d6:db:ef:e1:
         e3:69:19:61:7d:82:90:f5:60:79:38:72:30:f5:b8:98:f1:be:
         25:07:53:7d:d6:a7:08:b4:69:3a:90:80:53:d1:71:17:96:62:
         b7:1e:8d:2a:cd:f1:64:ac:00:65:8c:52:a0:19:bb:9b:36:50:
         93:7b:50:fb:0b:77:69:30:b5:4a:c4:05:f2:aa:74:57:0a:d9:
         11:68:d0:70:4d:2c:93:c9:fe:7f:77:6b:2e:e5:71:ee:18:d2:
         f2:74:10:a9:50:ba:f3:b0:fa:74:2a:10:4c:1f:6b:5f:8e:d4:
         94:13:ff:a4:7e:c7:40:e0:02:77:8f:cd:c0:ac:ff:b7:da:c7:
         68:5d:c6:44:51:f3:f2:21:17:e7:24:f6:96:09:75:92:23:65:
         0d:bb:14:47:f7:14:d1:9e:39:8b:1b:d8:b2:fe:95:b7:b2:65:
         36:ed:db:9e:7b:c7:fd:fe:86:12:53:2f:b6:c2:21:62:95:74:
         7a:0e:ad:0c:9d:58:86:80:18:f8:fb:c1:3f:7c:26:d3:d6:e8:
         54:b4:ab:b4:40:d5:94:bc:3c:f5:21:d6:18:bf:04:e7:b8:a6:
         d7:91:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----