Okta Advanced Server Access

Hi Team,

How Okta ASA works in depth?
What type of certificate is used and how RBAC is handled in these certificates?
Where I can find the client ssh certificate issued by Okta in the client machine?