Level 3's IRR Database

Mon Jan 31 14:16:28 UTC 2011

> when there is no roa for the arriving prefix, a roa for the covering
> prefix is used.  see draft-pmohapat-sidr-pfx-validate-07.txt.

which, btw, is why draft-ietf-sidr-rpki-origin-ops-04.txt warns

   Before issuing a ROA for a block, an operator MUST ensure that any
   sub-allocations from that block which are announced by others (e.g.
   customers) have ROAs in play.  Otherwise, issuing a ROA for the
   super-block will cause the announcements of sub-allocations with no
   ROAs to be Invalid.

randy