[Sidrops] Re: I-D Action: draft-ietf-sidrops-aspa-verification-28.txt

Alexander Azimov <a.e.azimov@gmail.com> Mon, 24 August 2026 16:15 UTC

Return-Path: <a.e.azimov@gmail.com>
X-Original-To: sidrops@mail2.ietf.org
Delivered-To: sidrops@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2F9DC12E787CF for <sidrops@mail2.ietf.org>; Mon, 24 Aug 2026 09:15:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787588153; bh=sblpqBu1Nf2VqOuF3MpArIE+jg4LxfdaxF1SCo30LTE=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=lzk8uK6y/4MrA6imKLE8k9Iu/P2acBJjxcpVr0uaEd7LtJSDpmpU2rMw4S3kJXy9w af/x4C/Kpl2SRnT8dJGie4TydAapIEDPZ/iyILFLnZYtFq7tfNwohzX6LdfoknnESs 5+Ayw6HgLzZ4UYeKyJ5qbjlzpr3GViT0D/N0o8Zc=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j4y1hOt6ACjW for <sidrops@mail2.ietf.org>; Mon, 24 Aug 2026 09:15:52 -0700 (PDT)
Received: from mail-wr1-x434.google.com (mail-wr1-x434.google.com [IPv6:2a00:1450:4864:20::434]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A97B812E787C5 for <sidrops@ietf.org>; Mon, 24 Aug 2026 09:15:52 -0700 (PDT)
Received: by mail-wr1-x434.google.com with SMTP id ffacd0b85a97d-47fde295992so43198f8f.0 for <sidrops@ietf.org>; Mon, 24 Aug 2026 09:15:52 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787588152; cv=none; d=google.com; s=arc-20260327; b=jTbJzSdNBsr+wkQsbrlYMiyKba6pxFVQoNacsg34VqKNk/APh5K1KoVdtx3gttVOZx Q0IgwWiEJXfo850ZCRpUVj7QtmrfgxQpOGNzEX8PiRDvHXOU2/3o3mEKWgVRbHYruHSO HcOQeJ/oCLLUcGtNJHe9dPf2fzm/1/OnUYb0XsWCp9Gj33nu4qbDt2hLAZKjivSGfRY0 XoOBL2KuUljALFfJs1zhsT86tlsD9jkCL1bEyWlbumNiJL/bPPb6QpQIepRh77jpGgox qVjmwEpmcdaP0krK6J1k+AC9DK/NNvG4XIGoTzMrFaZdn3zXnEz5swrJHUnN1DvW3zrp uUxQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=cQeIrf8i7tD0MczwlFcibQpOC1zyzqhsPIKFynuQlRA=; fh=wMWfXpIGEWGNsCFHO5Ir357i7yxYBfuN85sPHREt4KE=; b=oZHeZVLGDx41rm/GGHZ5Mv78+KBg7EtcxejaXib2LeXs3OOXXoKEvdhAYktsfGrxzR Y2XNxMQLUCtkkDFBLkaQyFVGtV/v3JUqADTxJxX5y9QlQdjhOKChohcOtTpI35wOEaQ8 /D16H5+RBu79/T6wF+dW4eyv0J51kDnSOsO8ECB63e86AfPEdpTQ6ly+VlDNenCJztSt ZJOth+v3Xt6e9OjhNQ7humUCgL3D0P8CRu+QopONzfp42Xgph5+Dm8yNYLjXwkpCHmxj klGNFI5XlDG86IOQimi6Q60roZZHvNDhRAQ30l/ZlZMSpi6GMPPboT353TT3dHCxG3L3 2tag==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787588152; x=1788192952; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=cQeIrf8i7tD0MczwlFcibQpOC1zyzqhsPIKFynuQlRA=; b=Z3aUDqBTlC9Qat6+R8HNBBoHKVVnfi4DMYHRJ5OvFCWkSkXsSfcqQpyp0SPHBQNThm xIk8W31jWarVxpyNOWGHOsToIg2OGfJz6cguM4RaUM31LEJOJEYKI7VqDE4A/7AkkbGd ouywuhcJs2w5leRpM4Orpn8/8wZKP9FIKvJ/bJo5M9v7tvNoy1J8EvWaOqSyyS1BDLYX hXq8Z7TVhdin1p4v1cIvSrZm1iKwr5AIjsiP/gZr0HxH2LtsBbtq8LpC/nKElje9O4lH xPqSj0JcQ2dqNpQYh2N5QB/NFviwN4wArZO9HQKUL1snkON913fm6sJm/sFPOK3JEGxQ dicg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787588152; x=1788192952; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=cQeIrf8i7tD0MczwlFcibQpOC1zyzqhsPIKFynuQlRA=; b=i56S+FkTdxlZumLPwC8Momw1i5TJoDdflOlXwr0R/QlX+gGPeBfXQhtBgqUY5JUi4m qFoEhpVx9/k2kySSYK1mScq2xA4KieBrncw5zFKWir+WJaJe2638V9W6pbmRSsdoqSxK u9wKoMnmosUlxZaz5bYp0/JR1ZDUZ9f8Y3oHzJ4fZNLHN5IOf7TrR1KQscanJ6iOomXE ewEWtiADGhGJ4cRtZxkSPlPihthGfymjEgJH+FQ8jcIunmgg1tJps/Q8gqM/uYyQJHSj oV9kYuhwLJ0NlugbP3gzPc2Ce8woSTeY3jQHWKiTDgczoS5NY5BlcysAmi9w7KGxI/cs jfnQ==
X-Gm-Message-State: AFuF++mQNvnLCOEb7frvFQZM+NcQ2MFWx039VxCKNABmFQACBNoxymcc hCl5//1NjzumoE9Lo1b6BoaLACDE4EJUdJJjn48E8XQQD0WqUeAGSkupiq5NdqouP6vic5U3Iy6 ZuCeqhkdwgLgRSBG2b1bsnUBeH/RcpLQ8/2aS
X-Gm-Gg: AR+sD12h8u2OlQDXlSpo6gLDbC78+ohi4RIlK5i8w3mEYKib7gI0yAMIBLdzDUSDDye TYghMqm4vUHl0avbPu/qrYmU1OMqnTKMh1An58LK0XoaKNB/0WZhlm9FiCGtQcZVdaehC5Czs4x u1JEkSSbOma4N15MwwjChYV2rI4NEbKJfRC3d0jqhZwvnFkoapQ1mh+IpRcvIYjAIHp4ytgYskM /lPgKXvxzJaENGqY8T1QXk6M2hbxJ0JkhfxAJhANOYLyGGcpI75/z1xvz0DsaG8VCUtTEy2VlE/ pelrd8qmFp2EaORfbxURMSkhlW8jddibiJB0JkXfRSzAWsz4Qv+L0sOLtKbrh8cef87fveNWyE1 xrK3SxkUTlwIZijiBaxFc4oQzFYssm3H8VF8iOsRdfqeVIYjaZqJMIXuka3ChJ3Y=
X-Received: by 2002:a05:6000:1787:b0:47f:eb38:26f9 with SMTP id ffacd0b85a97d-482d9945052mr626764f8f.8.1787588151336; Mon, 24 Aug 2026 09:15:51 -0700 (PDT)
MIME-Version: 1.0
References: <178758775624.437678.6244554865721697859@dt-datatracker-786f84c586-vck88>
In-Reply-To: <178758775624.437678.6244554865721697859@dt-datatracker-786f84c586-vck88>
From: Alexander Azimov <a.e.azimov@gmail.com>
Date: Mon, 24 Aug 2026 19:15:38 +0300
X-Gm-Features: AcwNN1UPzSSMSmRqRLikHc-in5y2Zm7ComXVUAFYDepwM25flRcSkiUK0UZEgZs
Message-ID: <CAEGSd=AG82ovpDBEHgbAx0N22HM4BE-BbQo34RQei8e6hf9HYw@mail.gmail.com>
To: sidrops@ietf.org
Content-Type: multipart/alternative; boundary="000000000000c3e4630659cd4c61"
Message-ID-Hash: AEDYWGVTVWIUY23PW7SOLGXPWNYVD3FB
X-Message-ID-Hash: AEDYWGVTVWIUY23PW7SOLGXPWNYVD3FB
X-MailFrom: a.e.azimov@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: i-d-announce@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Sidrops] Re: I-D Action: draft-ietf-sidrops-aspa-verification-28.txt
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/DN1g2P2fvwlYCa4plDdJP5outck>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>

Dear WG,

The v28 covers comments gathered during WGLC.
The biggest diff rests in the 5.1. Prerequisite AS_PATH Checks, that now
covers ordering between RFC4271/RFC9774 AS_PATH checks and ASPA
verification procedures.

пн, 24 авг. 2026 г. в 19:09, <internet-drafts@ietf.org>:

> Internet-Draft draft-ietf-sidrops-aspa-verification-28.txt is now
> available.
> It is a work item of the SIDR Operations (SIDROPS) WG of the IETF.
>
>    Title:   BGP AS_PATH Verification Based on Autonomous System Provider
> Authorization (ASPA) Objects
>    Authors: Alexander Azimov
>             Eugene Bogomazov
>             Randy Bush
>             Keyur Patel
>             Job Snijders
>             Kotikalapudi Sriram
>    Name:    draft-ietf-sidrops-aspa-verification-28.txt
>    Pages:   21
>    Dates:   2026-08-24
>
> Abstract:
>
>    This document describes procedures that make use of Autonomous System
>    Provider Authorization (ASPA) objects in the Resource Public Key
>    Infrastructure (RPKI) to verify the Border Gateway Protocol (BGP)
>    AS_PATH attribute of advertised routes.  This AS_PATH verification
>    enhances routing security by adding means to detect and mitigate
>    route leaks and AS_PATH manipulations.
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-sidrops-aspa-verification/
>
> There is also an HTMLized version available at:
>
> https://datatracker.ietf.org/doc/html/draft-ietf-sidrops-aspa-verification-28
>
> A diff from the previous version is available at:
>
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-sidrops-aspa-verification-28
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> Sidrops mailing list -- sidrops@ietf.org
> To unsubscribe send an email to sidrops-leave@ietf.org
>


-- 
Best regards,
Alexander Azimov