Authenticating L3VPN Origination Signaling
A BGP-signaled Layer-3 VPN's prefix bindings sent over BGP are subject to unintentional errors, both by the legitimate originator and by non-legitimate origins. This is of special concern if the VPN traverses untrusted networks. This document describes how the sender of the VPN/Prefix binding may sign it so that recipient of the binding may authenticate it.