Origin Validation Clarifications

Document Type Replaced Internet-Draft (individual)
Author Randy Bush 
Last updated 2018-04-19 (latest revision 2017-07-29)
Replaced by RFC 8481
Stream (None)
Intended RFC status (None)
Expired & archived
pdf htmlized (tools) htmlized bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Replaced by draft-ietf-sidrops-ov-clarify
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


Deployment of RPKI-based BGP origin validation is hampered by, among other things, vendor mis-implementations in two critical areas, which routes are validated and whether policy is applied when not specified by configuration. This document is meant to clarify possible misunderstandings causing those mis-implementations.


Randy Bush (randy@psg.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)