[ppml] ARIN Certificates

[Randy Bush]

>> perhaps having to have a different cert from each rir with which
>> one deals is not the best solution for the global internet?  is
>> the nro considering a single cert authority?
> 
> I think that it would be an admirable goal...but
> 
> ...There's something to be said for the fact that the 5 RIR's are 
> separate organizations, loosely joined by having comparable policies 
> yet retaining independence.

hey, i'm just trying to get a usable operational cert, not delve
into irr, iana, dhs, ... politics.

e.g., as sbgp rolls out, am i going to have sign my euro prefixes
with a ripe cert, my asian ...  i think you get it.

> ...It's not clear to me that the NRO is to have that much of a 
> functional role.  Perhaps the RIRs can someday accept each other's 
> root certificates - that would need some discussion and review.

then maybe iana should be the root ca

randy