Sorry, I was not inspired to write a lengthy text.
Denis
Index: bgpd.conf.5
===================================================================
RCS file: /cvs/src/usr.sbin/bgpd/bgpd.conf.5,v
retrieving revision 1.178
diff -u -p -r1.178 bgpd.conf.5
--- bgpd.conf.5 9 Sep 2018 17:11:26 -0000 1.178
+++ bgpd.conf.5 2 Oct 2018 18:14:21 -0000
@@ -387,6 +387,21 @@ prefix-set as64496set { 192.0.2.0/24 pre
.Ed
.Pp
.It Xo
+.Ic roa-set
+.Ic { Ar address Ns Li / Ns Ar len Ic maxlen Ar len Ic source-as Ar asn ... Ic
}
+.Xc
+A
+.Ic roa-set
+holds a collection of Validated ROA Payload (VRP).
+Each prefix is checked against the
+.Ic roa-set
+and the Origin Validation Status (OVS) is set.
+.Bd -literal -offset indent
+roa-set { 192.0.2.0/24 maxlen 24 source-as 64511
+ 203.0.113.0/24 source-as 64496 }
+.Ed
+.Pp
+.It Xo
.Ic rde
.Ic med
.Ic compare
@@ -1386,6 +1401,14 @@ can be set to
in which case the nexthop is compared against the address of the neighbor.
Nexthop filtering is not supported on locally announced networks and one must
take into consideration previous rules overwriting nexthops.
+.Pp
+.It Xo
+.Ic ovs
+.Pq Ic valid | not-found | invalid
+.Xc
+This rule applies only to
+.Em UPDATES
+where the Origin Validation Status (OVS) matches.
.Pp
.It Ic prefix Ar address Ns Li / Ns Ar len
.It Ic prefix Ar address Ns Li / Ns Ar len Ic prefixlen Ar range
