Re: [Sidrops] feedback on draft-michaelson-rpki-rta

[Stephen Kent <[e-mail]>]

Tim,

You said:

    The use case is intentionally*_not_ limited to secure routing*  and publishing in the RPKI may not be necessary in envisaged cases.

The CP (RFC 6484) imposes constraints on the set of uses for certs 
issued under the RPKI (and thus containing the designated policy OID). 
As noted in the introduction, RPKI certs are "designed exclusively for 
use in support of validation of claims related to current INR holdings." 
Using ANY cert containing the OID defined in the CP for ageneric set of 
cases violates the CP. Thus it is inappropriate to publish a spec that 
uses certs issued under the RPKI (whether published in the repository 
system or not) for applicatons inconsistent with the CP.

Steve