draft-ietf-sidrops-moa-profile

A Profile for Mapping Origin Authorizations (MOAs)

streamIETF groupsidrops stateactive pages11 rev03 expires2026-07-16 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-sidrops-moa-profile/
This document proposes a new approach by leveraging Resource Public Key Infrastructure (RPKI) architecture to verify the authenticity of the mapping origin of an IPv4 address block. MOA is a newly defined cryptographically signed object that provides a means for the address holder can authorize an IPv6 mapping prefix to originate mapping for one or more IPv4 prefixes. When receiving the MOA objects from the relying parties, PE devices can verify and discard invalid address mapping announcements from unauthorized IPv6 mapping prefixes to prevent IPv4 prefix hijacking.