A ROA Is A Permission Slip
What is a ROA, stripped of everything except the three facts it actually asserts?
Open Session 01Sessions
RPKI track sessions
Covering Is Prefix Math
"Does this ROA say anything about this announcement?" is really two separate questions — what are they, and why is conflating them the classic operator mistake?
Open Session 02Three Verdicts, Not Two
Why does origin validation return three verdicts instead of a simple valid/invalid bool, and what exactly separates the two flavors of invalid?
Open Session 03Policy Decides What a Verdict Means
A verdict of VALID, INVALID, or NOT_FOUND is a fact about the world. What does a router actually do with that fact, and who decides?
Open Session 04Build the Toy Validator Loop
What does a real RPKI validator's whole job look like when loading ROAs, checking one announcement, and sweeping a whole route table are wired into a single object instead of four separate demos?
Open Session 05