The validation of certificates and ROAs probably takes a lot of processing power and memory. How will my router cope?

An RPKI-capable router does not perform any of the cryptographic operations involved in BGP origin Validation. All cryptography is performed by a separate software toolset, running the operator’s local network. The processed data can be fed into an RPKI-capable router, where you can apply policies such as route-maps.

For more information and examples, please refer to the Router Configuration page.