Resource Public Key Infrastructure and Route Origin Authorization

Resource Public Key Infrastructure (RPKI) is a best-practice security framework designed to enhance the security of Border Gateway Protocol (BGP) routing. It uses cryptographic methods to verify the authenticity and ownership of IP address prefixes, ensuring only legitimate networks can announce routes.

Cox highly recommends Dedicated Internet Access (DIA) / Cox Optical Internet (COI) customers with BGP Routing adopt RPKI.
 

Most Cable Internet providers are dedicated to ensuring secure and reliable internet service. Companies like Cox, Charter, and Comcast have successfully implemented RPKI signing across all their residential networks, enhancing security. Additionally, adopting best practices for Messaging, Malware, and Mobile Anti-Abuse Working Group (M3AAWG) to protect against Distributed Denial of Service (DDoS) attacks.
 

The FCC has advised Internet providers to enforce RPKI requirements starting January 1, 2025.

Understanding RPKI and Route Origin Authorization (ROA)

RPKI and ROA benefits you in the following ways.

• Preventing Route Hijacking: RPKI helps prevent route hijacking by ensuring that only authorized networks can announce IP prefixes. This reduces the risk of malicious actors redirecting traffic through unauthorized routes.
• Enhances Route Validation: With RPKI, we can validate the authenticity of BGP route announcements. This ensures that the routes we accept are legitimate and come from verified sources, improving the overall integrity of our routing infrastructure.
• Mitigating Misconfigurations: RPKI can help mitigate the impact of accidental misconfigurations by providing a mechanism to verify route announcements. This reduces the likelihood of routing errors that can lead to network outages or degraded performance.
• Compliance and Best Practices: Implementing RPKI aligns with industry best practices and compliance requirements. It demonstrates our commitment to maintaining a secure and reliable network infrastructure.

Implementing BGP RPKI and ROA

Review the general outline of the process to implement BGP RPKI and ROA in the table below.
 

For further information on implementing RPKI, see American Registry for Internet Numbers (ARIN) and Protecting your Routes with RPKI Overview Video.