On Tue, Jan 3, 2023 at 9:58 AM Mike Hammett <nanog@ics-il.net> wrote:

ROAs expire. Creating new ones doesn't seem to be terribly difficult, but why do they expire in the first place?

I think this is covered in the overview rpki document (design decisions):
https://datatracker.ietf.org/doc/rfc8374/

maybe particularly section 9.2 is of interest?