wobscale has now published RPKI ROAs through ARIN
thank you for listening to this alphabet soup post
I finally did this because a senior principal network engineer at amazon.com messaged me on internal IRC saying I should do the thing, which is so far the best way anyone has reached the wobscale NOC (me)
also for the longest time I had this impression that RPKI was implemented by stapling signatures onto route announcements, which is why I was completely uninterested in getting it to work with my setup?
I now understand that the BGP side of things is meant to passively sync down ROA changes and apply routing rules based on them (which I'm still not doing but am adding as a requirement for the new network setup)
Cybrespace is an instance of Mastodon, a social network based on open web protocols and free, open-source software. It is decentralized like e-mail.