<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">RPKI/ROA is a way to cryptographically prove what someone needs to prepend if they want to hijack your addresses.<div><br></div><div>Owen</div><div><br><div><br><blockquote type="cite"><div>On Oct 28, 2022, at 08:00, Samuel Jackson <bobin.public@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><div dir="ltr">
<div dir="ltr"><div>Hello,</div><div>I am new to RPKI/ROA and still
learning about RPKI. From all my reading on ARIN's documents I am not
able to answer some of my questions.</div><div>We have a public ARIN block and advertise smaller subnets from that to our ISP's. We do not have any RPKI configs. <br></div><div>We
need to setup ROA's to take another subnet from the ARIN block to AWS.
Reading ARIN's docs, it seems I need to get setup on their Hosted RPKI
service after which I can configure ROA's for the networks I am taking
to AWS.</div><div><br></div><div>My question is, will this impact my existing advertisements to my ISP's. The current advertisements do not have ROA's.</div><div>Will having RPKI for my ARIN network, without ROA's for the existing advertisements impact me?<br></div><div><br></div><div>Thanks for your help.<br></div><div><br></div><div>Ref:</div><div><a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html" target="_blank">https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html</a> <br></div><div><a href="https://www.arin.net/resources/manage/rpki/roa_request/" target="_blank">https://www.arin.net/resources/manage/rpki/roa_request/</a> <br></div><div><a href="https://www.arin.net/resources/manage/rpki/hosted/" target="_blank">https://www.arin.net/resources/manage/rpki/hosted/</a></div></div>
</div>
</div></blockquote></div><br></div></body></html>