Anyone in a position where they are responsible for generating a root key for a certificate authority, 100% knows how to generate a key in their sleep. The only explanation is that it was made easy intentionally, not lazily.