<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace">I'm surprised by the amount of big companies still using LOAs when you have ROAs and IRRs. LOAs were fine in 1997 when there were 10 prefixes but not now when advertising prefixes is so dynamic.</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">When I select a transit provider the first question I ask is how they manage BGP filters. If they say "you need to send us an LOA" I completely discard that provider, no matter the price. For me telling somebody to send a prefix LOA is to tell: "we live in the 1950s so once we receive your LOA, we are going to wait 10 years for the politburo approval and then we are going to translate your prefixes to cuneiform and add them by hand to your prefix list, yes, there could be errors and you will need to send a new LOA".</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">Adding RPKI checks to your peering filters is very easy, also adding prefix lists based on IRRs is easy. Then you are going to have more time to spend on other activities.</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Nov 27, 2023 at 9:25 AM Carlos Martinez - Cagnazzo vía LACNOG <<a href="mailto:lacnog@lacnic.net">lacnog@lacnic.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><u></u>
<div>
<p>Hi Chris,</p>
<p><br>
</p>
<p>Thank you for reaching out regarding this research. I believe
it's a topic very much worth discussing as IMO LOAs are always a
disaster waiting to happen. <br>
</p>
<p><br>
</p>
<p>I encourage members who find this issue relevant to to fill the
survey and to bring further discussion to the list.</p>
<p><br>
</p>
<p>@Chris, on the other hand I encourage you to produce a Spanish
and a Portuguese version of the survey as language may be a
significant barrier preventing you from getting more feedback.<br>
</p>
<p><br>
</p>
<p>Warm regards,</p>
<p><br>
</p>
<p>/Carlos</p>
<p><br>
</p>
<div>On 11/27/23 1:04 AM, Christopher Hawker
wrote:<br>
</div>
<blockquote type="cite">
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Hello
everyone,</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Aftab
Siddiqui is currently exploring the possibility of using Route
Object Authorisations (ROAs) as a potential replacement to
LOAs. Separate to this (and unknowing of Aftab's research), I
had started a discussion on the RPKI Community guild on
Discord (<a href="https://discord.gg/9jYcqpbdRE" target="_blank">https://discord.gg/9jYcqpbdRE</a>) discussing the usage
of ROAs instead of LOAs.</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">An
LOA, or "Letter of Authority" / "Letter of Authorization," is
a formal document granting permission for third parties to
take specific actions regarding network resources or services.
In the service provider industry, its primary use is for
advertising address resources (IPv4/v6 and ASN). When an
organization intends to announce its IP prefixes through its
own or a transit provider's ASN to the global internet, it
typically needs to provide an LOA to their transit provider,
confirming their custodianship or ownership of the resources.</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">RPKI
ROA, stands for "Resource Public Key Infrastructure Route
Origin Authorization," is part of a security framework
designed to validate the authenticity of internet routing
information. It involves a digitally signed object that
specifies which Autonomous Systems (ASes) are permitted to
announce specific IP address prefixes.</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Could
you please take a moment to fill out our brief survey? Your
feedback will play a crucial role in our understanding of this
topic.</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Survey
Link: <a href="https://www.surveymonkey.com/r/JCHLWBB" target="_blank">https://www.surveymonkey.com/r/JCHLWBB</a></span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Thanks,</span></div>
<div><span style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Christopher
Hawker</span></div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
LACNOG mailing list
<a href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a>
<a href="https://mail.lacnic.net/mailman/listinfo/lacnog" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a>
</pre>
</blockquote>
</div>
_______________________________________________<br>
LACNOG mailing list<br>
<a href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a><br>
<a href="https://mail.lacnic.net/mailman/listinfo/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a><br>
</blockquote></div>