RPKI-based Validation with Prioritized Resource Data

RPKI ROAs and other digitally signed objects provide a practical solution to validate BGP routes for preventing route hijacks and leaks. During ROV operations, validation data may be sourced not only from issued ROAs but also from other local sources. As these data sources vary in credibility, ROV operations may therefore require different response actions for invalid or unknown routes. This document takes ROV as an example to describe a flexible RPKI- based route validation mechanism with multi-priority data, and outlines relevant use cases, framework, and requirements for ROV operations that involve multi-priority data.