<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">You fundamentally misunderstand the situation, then.<div><br></div><div>ROAs must be delegated according to the way networks are delegated. Lots of ISPs get addresses from upstream ISPs who get them from upstream ISPs who get them from ARIN.</div><div><br></div><div>In the case where IP addresses are delegated ARIN->ISP A->ISP B->ISP C, for RPKI to function, it has to be possible for ISP B to get a ROA from ISP A and for ISP C to</div><div>Get a ROA from ISP B.</div><div><br></div><div>ROAs have to be representative of the ORIGINATOR of the route in BGP or they are useless.</div><div><br></div><div>Owen</div><div><br><div><br><blockquote type="cite"><div>On Jun 23, 2023, at 11:24, Fernando Frediani <fhfrediani@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div><p>I don't think this should be allowed to happen. ROAs are to be
created by organizations who receive the allocation from the RIR
as ultimatelly they remain responsible for that IP space. If they
have allocated a block to a customer they should be the ones
responsible for creating any ROAs they need for that IP space (in
fact ideally they should create for the whole IP space anyway).<br>
</p><p>Fernando<br>
</p>
<div class="moz-cite-prefix">On 23/06/2023 13:20, Richard Laager
wrote:<br>
</div>
<blockquote type="cite" cite="mid:5821dcf1-f4ce-4d80-c88b-9d8e97483dac@wiktel.com">It is
my understanding that the downstream Org cannot create RPKI ROAs
for Reallocated IP Networks. For example, 206.9.80.0/24 is
reallocated to me (OrgID WIKSTR-1), but I cannot make a ROA for
it.
<br>
<br>
This is obviously suboptimal for adopting RPKI.
<br>
<br>
Is this something that we could fix with Policy development, or do
I need to bark up some other tree?
<br>
<br>
</blockquote>
</div>
_______________________________________________<br>ARIN-PPML<br>You are receiving this message because you are subscribed to<br>the ARIN Public Policy Mailing List (ARIN-PPML@arin.net).<br>Unsubscribe or manage your mailing list subscription at:<br>https://lists.arin.net/mailman/listinfo/arin-ppml<br>Please contact info@arin.net if you experience any issues.<br></div></blockquote></div><br></div></body></html>