RPKI and Trust Anchor question