<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="background-color: rgb(255, 255, 255); color: rgb(0, 0,
0); font-family: Tahoma; font-size: 16px;" text="#000000"
bgcolor="#FFFFFF">
<br>
<br>
<div class="moz-cite-prefix">On 10/Aug/18 03:48, Randy Bush wrote:<br>
<br>
</div>
<blockquote type="cite" cite="mid:m2d0urj8ka.wl-randy@psg.com"
style="border-left: 2px solid #009900 !important; border-right:
2px solid #009900 !important; padding: 0px 15px 0px 15px; margin:
8px 2px; color: rgb(0, 0, 0) !important; background-color: null
!important; color: null !important;">
<pre wrap="">
this advice is a bit controversial. see
<a class="moz-txt-link-freetext" href="https://tools.ietf.org/html/draft-ietf-sidrops-rpkimaxlen-00">https://tools.ietf.org/html/draft-ietf-sidrops-rpkimaxlen-00</a>
i have no big agenda either way.
i suggest that the best practice is to roa exactly what you announce in
bgp, no more no less.</pre>
</blockquote>
<br>
I agree that it's a tricky one. But in my experience, nearly 100% of
all Invalids are due to more-specifics not ROA'd vis a vis the
parent aggregate.<br>
<br>
Ultimately, it appears folk are either lazy to ROA for every prefix
they originate, or not educated enough about RPKI to do it right. <br>
<br>
My personal preference (and best practice) would be to ROA and
originate specifically. Then again, I also say best practice is not
to de-aggregate, but alas...<br>
<br>
Mark.<br>
</body>
</html>