4 ms·
Similar to CAs on the web in RPKI a TA (Trust Anchor) will sign a ROA (Route Origin Authorization X.509 certificate) to certify an ASN can originate routes with
by almost_usual 3y ago
Similar to CAs on the web in RPKI a TA (Trust Anchor) will sign a ROA (Route Origin Authorization X.509 certificate) to certify an ASN can originate routes within an address space.
There are five TAs which are RIRs (Regional Internet Registries) AFRINIC, APNIC, ARIN, LACNIC, and RIPE.
So similar to how your web browser can determine a website is valid or not by checking the certificate is signed by a CA. A network can determine a route is valid or not by checking the ROA is signed by a TA.