Design Overview
IPsec --> authenticity and integrity of peer-to-peer communication
Public Key Infrastructures (PKIs) --> secure identification of BGP speakers and of owners of ASes and of address blocks
Attestations --> authorization of the subject (by the issuer) to advertise the specified address blocks
Validation of UPDATEs using certificates and attestations
Distribution of countermeasures information --> certificates, CRLs, attestations