TC(bgp.net.br) is using IRRd 4.2, which has an RPKI pseudo-source with exactly that. ROAs are downloaded from NTT. You can see how they look like at: https://bgp.net.br/whois/?q=-s%20RPKI%20200.160.0.0/20 But this is not used to create route(6) objects in the TC source, only to invalidate route(6) objects that users create at TC. Mirrored IRRs like RADB are not subject to RPKI validation, only to scope filter (private IP addresses, private ASNs). Rubens On Tue, Oct 26, 2021 at 5:29 PM Shawn <mailman.nanog.org@kleinart.net> wrote:
Curious if any IRR databases are mirroring/importing ROA data - creating route|6 objects from ROA?
LACNIC requires a route object to be created when creating a ROA. APNIC you create a route object, then may generate a ROA during that process. Other RIR's, curious if anything tries to bring the two together?
Applicable for networks that only use IRR data (do not yet validate RPKI), they could benefit.
IRR questions: How do most large networks maintain (automate) their IRR records? Is it standard practice to accept more specifics (append IPv4 "le /24" and IPv6 "le /48")? Or is it expected to have one IRR route per BGP announcement?