[SANOG] Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

[Randy Bush]

you may find rfc 9255 helpful in this regard, particularly the third
prargraph of the intro

   It has been suggested that one could authenticate real-world business
   transactions with the signatures of INR holders.  For example, Bill's
   Bait and Sushi (BB&S) could use the private key attesting to that
   they are the holder of their AS in the RPKI to sign a Letter of
   Authorization (LOA) for some other party to rack and stack hardware
   owned by BB&S.  Unfortunately, while this may be technically
   possible, it is neither appropriate nor meaningful.


randy