It's very important to specify the /24 inside the /23 for example so as you said "for all our subnets being advertised".

On Tue, Nov 1, 2022 at 5:01 PM Randy Bush <randy@psg.com> wrote:

> Thanks everyone for your inputs. So bottomline setup RPKI and setup ROA's
> for all our subnets being advertised.

if the BGP advertisements are correct, then mirror them in ROAs. most,
if not all, CA UIs make that easy.

randy