BGP Origin Validation Using RPKI

This feature introduces support for BGP Origin Validation using resource public key infrastructure (RPKI). RPKI is a specialized PKI framework designed to secure the Internet's routing infrastructure. RPKI does the following:

• Provides a way to validate whether a rightful resource holder authorizes the originating autonomous system (AS) number and announces the IPv4 and IPv6 prefixes. 
• Makes sure that the prefix lengths for the routes are within the limits defined by their owners. 
• Links the route information (a resource) to a trust anchor (a root certificate authority). This linking allows legitimate holders of these route resources to control the operation of routing protocols, in BGP, regarding their route information. 
• Uses X.509 certificates, which allow local Internet registries (LIRs) to obtain a resource certificate listing the AS numbers and IP address resources they hold. Supports VRF instance along with Default Routing instance.