Registration Services Agreement (RSA) FAQ
ARIN provides the FAQs and answers below to enhance the Internet community’s understanding of RSA Version 12.0 / LRSA Version 4.0. The FAQs do not alter or otherwise modify any terms of any RSA. For information focused specifically on the Legacy Registration Services Agreement, please see the section below.
Section 2 provides ARIN the ability to terminate the agreement if a Holder actively misrepresents information it provides to ARIN. Does that mean that ARIN can, and will, terminate my agreement if we make an innocent or trivial mistake in an application?
ARIN has never terminated an agreement for an innocent or trivial mistake. However, if ARIN determines that an application contains significant or material misrepresentations, whether submitted during the application process or later, ARIN may use this provision to terminate the agreement, and if Internet number resources have been issued, revoke those Internet number resources. This provision is intended to protect the whole community from fraudulent applications or answers. It is a seldom used power and subject to ARIN’s dispute resolution mechanism. To date, no such dispute has ever occurred.
If I suspect that a Holder is using its Internet number resources for illegal purposes, such as phishing or spamming, should I contact law enforcement and/or ARIN?
Yes, if you suspect the occurrence of Internet number resource fraud please report these instances to ARIN as provided in ARIN’s Fraud Reporting Process.
If you suspect illegal activity is occurring, ARIN suggests you contact the appropriate state, federal, or provincial law enforcement agencies. ARIN is not a law enforcement organization and does not have the authority to investigate such violations of law. Section 2(e) provides ARIN the authority to follow national, state, judicial, or other government decisions or directives concerning the alleged illegal conduct. In addition, ARIN will cooperate with national, state, or other government inquiries that use appropriate methods to obtain information, including, but not limited to, the use of a subpoena or other formal process.
Help us understand what the bankruptcy provision in the RSA means.
Section 10, the bankruptcy section, provides specific references to the Bankruptcy Code for the convenience of reviewing lawyers. The intent of this provision is that in the event of a bankruptcy, it facilitates the continuance of the Services to a bankruptcy estate, including the use of the included number resources for the Holder, and to preserves any rights to the registration of unique Internet number resources.
A bankruptcy estate can transfer Internet number resources as a result of a liquidation or auction so long as the recipient can comply with NPRM 8.2 (if the Internet number resources are part of a sale of assets that use the Internet number resources), or if the Internet number resources are transferred separately under NPRM 8.3, so long as the recipient can demonstrate need for the Internet number resources under applicable policy. Additionally, a bankruptcy estate now has the option of transferring Internet number resources under NRPM 8.4 in accordance with the provisions of that policy. Bankruptcy transfers of Internet number resources that occur without notice to ARIN or that preclude ARIN’s policy and procedures from being followed may not be automatically accepted by ARIN.
When legacy number resources, not previously covered under an RSA, are being transferred in bankruptcy, ARIN will work with recipients to enter into an RSA as required by policy.
Why is there a mandatory arbitration procedure for dispute resolution outlined in section 14(k)?
ARIN believes that section 14(k) provides a fair, effective, and relatively low cost means of resolving any disputes. To date, it has never been used, but remains available if needed by either party.
I represent a federal, state, or provincial government entity. Therefore, I cannot agree to the RSA’s standard provisions concerning indemnification, bankruptcy, governing law, and/or binding arbitration. How does ARIN handle this situation?
ARIN accommodates the unique circumstance of federal, state, or provincial government entities, and has a practice of modifying RSAs for such requirements. In order for any such modifications to be considered, governmental entities must provide statutory or regulatory references to explain and demonstrate the necessity for a modification in order to meet legal requirements and allow the governmental entity to execute the RSA. For example, when there has been an appropriate statutory or legal reference stating that a governmental entity cannot provide indemnification under applicable law, ARIN has modified or deleted the indemnification provision in its entirety. In other instances, ARIN, when appropriate, has deleted the bankruptcy provision. As to the governing law provision, if you provide ARIN with a federal, state, or provincial statute requiring that another state’s law cannot apply to the agreement, we may revise the agreement to reflect governing law of that state applies or remain silent on choice of governing law. In addition, we can substitute a non-binding mediation provision for the binding arbitration, if required by law. ARIN’s attorneys can quickly respond to such issues.
My organization requires a certification that amounts invoiced by ARIN are for registration services that have been fully completed and delivered. Will ARIN provide such a certification?
ARIN invoices are for pre-payments for services to be rendered in the upcoming year. In the case of renewals, invoices are generally sent approximately sixty (60) days in advance of the upcoming term. Therefore, ARIN cannot make such a certification; however, ARIN is willing to make any formal representation consistent with this answer.
My company signed a previous RSA version. Is it possible to have my previously issued Internet number resources covered under the most current RSA, thus receiving those rights and benefits?
Yes, you can have your registration of previously issued Internet number resources covered under the most current RSA version. Please contact us and we are happy to assist you with entering into a new RSA, but you are not required to do so.
My company would like a version of the RSA that we can edit and identify proposed revisions to the RSA. Will ARIN provide an editable version of the RSA?
ARIN does not provide a readily editable version of its standard RSA to customers and only provides the RSA in the PDF file format. ARIN staff will gladly receive and review any requested modifications to the RSA from governmental entities and will make available a revised version of the RSA when appropriate.
Under Section 3 (a) and (c) of the RSA, there is a reference to unauthorized access. Why is this provision in the agreement, and can the RSA be revised to only reference individuals currently associated with our organization (i.e. current employees, current agents, etc.)?
ARIN relies on the information provided by you regarding individuals authorized to act on behalf of your company as the Point of Contact (POC) and who can make changes to your account in the ARIN database. It is the account holder’s responsibility to maintain this information and safeguard the access to your ARIN account. ARIN requires indemnification from you if any Claim is made against ARIN due to unauthorized access as defined in Section 3. Absent a governmental entity, changes to limit this provision to generally reference individuals currently associated with your organization are not permitted. It is the account holder’s responsibility to ensure individuals formerly, but not currently, associated with your organization (i.e. former employees) no longer have access to your ARIN account.
The RSA has limited ARIN’s authority to modify the agreement without prior consent, as described in section 1(d)(the same authority was in an unnumbered paragraph previously). What is the change about?
Virginia Code § 59.1-503.4 of the Uniform Computer Information Transactions Act provides Virginia corporations like ARIN with the authority to modify an agreement so long as the following occurs: (1) ARIN reasonably notifies the Holder of the change; and (2) ARIN permits the Holder to terminate the contract as to future performance if Holder determines the modification is unacceptable. ARIN has included this provision in all RSA versions since RSA 5.0, introduced in June 2004. However, ARIN never used this provision.
In this version in paragraph 1(e) ARIN has substantially limited when it may use this provision. First, ARIN’s Board must find “an immediate and compelling need to amend the Agreement due to a definable, discrete, indentifiable change in relevant statute or case law.” Alternatively the Board may seek ratification of a proposed change by the members. These twin limits should substantially reduce any concern the provision can be used to materially change member contractual rights.
Please note that RSA 12.0 also provides an additional means of notification, should ARIN use this provision. Section 1(d), as written in RSA 12.0, specifies that, in the case of a modification, ARIN will provide notification to the Holder as defined in the RSA. This notification is in addition to the notification that ARIN will provide on its website. Moreover, Section 13(d) provides a Holder with the ability to terminate the agreement at any time with the return of Holder’s rights to registration of number resources.
Because the Internet community has the ability to change policies, the authority in Section 5 is consistent with the necessary ability of ARIN to respond to rapidly changing conditions.
My attorney reviewed the RSA and has suggested certain revisions; however, I noticed that the RSA specifically states that ARIN will not accept any alterations to the agreement. Will ARIN consider my proposed revisions?
ARIN does not negotiate individual changes in the RSA or LRSA. This is done as a fairness issue to ensure all RSA holders have the same rights and responsibilities in each RSA version. ARIN will consider your proposed revisions only for future RSA versions. Given that ARIN processes thousands of RSAs each year, it is unable to provide most requested revisions with the exception of governmental entities. Indeed, the RSA is based, in part, upon the feedback ARIN has received from the community.
Legacy Resource Holder FAQ
What is a legacy number resource and who is a legacy resource holder?
A legacy number resource is an IPv4 address or Autonomous System Number that was originally issued to the current registrant by an Internet Registry (InterNIC or its predecessors) prior to the inception of ARIN on 22 December 1997. A legacy resource holder is any individual or organization that was directly issued legacy number resources.
Please note: if a legacy resource is transferred and subsequently covered under a standard Registration Services Agreement (“RSA”), it will no longer be considered a legacy resource and will be ineligible to be covered under a Legacy Registration Services Agreement (“LRSA”).
You released a new RSA (12.0/4.0); how is it different from previous LRSA versions?
This Legacy RSA version is combined with the RSA as the terms and conditions of the distinct agreements (RSA and LRSA) have been intentionally converging for the past few versions of each agreement. Revisions made to this combined agreement seek to achieve the following:
- The agreement is only applicable to “Included Number Resources” (i.e. only those Internet number resources identified in this agreement, and not any other number resources that may be included under a separate LRSA)
- The Customer acknowledges that “Included Number Resources” in the agreement are not property
- The agreement provides uniform service terms and conditions (other than fees) for all customers receiving services from ARIN
- The agreement more clearly defines ARIN’s services that are covered by the agreement, including resource certification
- The agreement is more balanced with respect to term language previously seen as more favorable to ARIN
Does the new version automatically supersede my previously signed LRSA?
No, this version does not automatically supersede a previously signed LRSA. If you have legacy number resources under a previous version of the LRSA, you have the option to request that these resources be covered under the newest version of the LRSA. Once you execute the new LRSA 4.0 to cover all of your identified legacy number resources, your previously signed LRSA will be superseded.
Will I be required to upgrade to this version if I have a previously signed LRSA?
No. You will only be required to execute the new LRSA 4.0 if you wish to transfer or add legacy number resources to an existing Org ID that already has a signed LRSA.
How do I know if my legacy number resources are already covered under an LRSA or not?
Typically, any legacy number resources that are covered under an LRSA will be associated with an Organization ID ending in a “-Z”. If you have any questions regarding your legacy resources, please contact ARIN’s Registration Services Department. You may contact the Registration Services Help Desk at +1.703.227.0660 or by submitting an Ask ARIN ticket via your ARIN Online account.
How and why does this LRSA differ from ARIN’s previous LRSA, which covers number resources previously or subsequently issued by ARIN?
This RSA differs from previous versions of the RSA and LRSA in that it is a single document serving two purposes – as RSA 12.0, it addresses the registration of non-legacy number resources and the applicable general fee schedule and as LRSA 4.0, it addresses the registration of legacy number resources and the applicable fees for legacy number resources. Other than fees as described here, this agreement now provides for more uniform service terms and conditions for both legacy and non-legacy registrants.
If my organization name is different from the one currently registered in ARIN’s Whois due to a company merger or acquisition, can my IPv4 resources still retain their legacy status if I work with ARIN to request a transfer and update the Whois records?
Yes, as long as these resources are not covered under a standard RSA. Upon approval of an 8.2 Mergers, Acquisitions, and Reorganizations transfer, you will have the option of retaining the legacy status of your resources (IPv4 or ASNs) if they were issued prior to 22 December 1997 once you execute the LRSA 4.0. If you choose not to execute the LRSA 4.0 and retain legacy status, you will be required to execute the standard RSA.
I have legacy IPv4 number resources and want to apply for IPv6 number resources as an end user. Will I have to sign an RSA to receive an IPv6 assignment?
Yes. Once an organization is approved for IPv6 resources, it must sign a standard RSA before those resources can be issued. This RSA will only cover your IPv6 number resources and not your legacy number resources unless you specifically ask to have them included. All resources issued directly by ARIN must be covered under an RSA in accordance with established business procedures.
I have legacy number resources registered in ARIN’s Whois database but have no plans to sign the LRSA. Will ARIN continue to maintain my records, and can I still make database changes to my records if I need to?
Yes, currently ARIN will maintain your records and allow you to make certain database changes as long as you are the authorized Point of Contact. For more specific information about services available to legacy resource holders, visit the Legacy Resource Services page.
Please note that community-developed policy could change this in the future.
Will updating my organization record in ARIN’s database and signing the LRSA require me to return to ARIN any legacy number resources I hold that are not currently being utilized?
No, signing the LRSA as a legacy resource holder will not obligate you to return unutilized legacy number resources to ARIN. The LRSA explicitly states that ARIN will not reclaim unutilized legacy number resources from those who sign the LRSA. Organizations may voluntarily choose to return unutilized legacy number resources to ARIN at any time.
Can ARIN take away the legacy number resources my company or institution currently holds if I don’t sign the LRSA?
ARIN has no plans or intention to “take away” legacy resources from those who have not signed an LRSA/RSA. Absent any community-developed policy or a changed statutory or case law requirement, ARIN will not do so. Signing the LRSA contractually locks in a set of rights that each organization should carefully consider.
I have legacy number resources registered in my own name and want to sign the LRSA. Can I sign the LRSA in my own name and not a company name, and if so, how do I proceed with this?
Yes, if your legacy number resources are currently registered in the ARIN Whois in your name, then you can sign the LRSA in your name. The procedure for signing the LRSA begins with the completion of a legacy application which can be found on the Legacy Registration Services Agreement page. Once ARIN staff has verified the information you have supplied, they will send you a PDF copy of the LRSA and instructions on how to complete the LRSA.
I represent an ARIN-region sovereign nation’s Federal Government agency and have questions about covering legacy resources under the LRSA. What do I do first?
Given that sovereign Federal Government agencies may have unique legal limits that impact signing an LRSA, we suggest that you first contact ARIN’s Registration Services Department to discuss your circumstance. In some cases you might then be referred to ARIN’s legal counsel. You may contact the Registration Services Help Desk at +1.703.227.0660 or by submitting an Ask ARIN ticket via your ARIN Online account. For more information, visit the Legacy Registration Services Agreement page.
I represent an ARIN sovereign state or provisional government entity. Because of that status, I cannot agree to the LRSA provisions concerning indemnification, bankruptcy, governing law, and/or binding arbitration. How does ARIN handle this situation?
ARIN is willing to accommodate governmental entities with appropriate revisions when governmental authorities provide specific statutory references that support their concerns. For example, with regard to the governing law provision, if you provide ARIN with a Federal, state, or provincial statute requiring that another state’s law cannot apply to the agreement, we may revise the agreement to reflect the governing law of that state applies or remain silent on choice of governing law. In addition, we can substitute a non-binding mediation provision for the binding arbitration, if required by law. ARIN’s attorneys can quickly respond to such issues.
Why is arbitration used as a dispute resolution technique in the agreement, and how does this impact rights?
Arbitration is generally seen as more cost efficient and tailored to handle disputes about an agreement’s application. Generally, reliance on courts is more formal, may require more time for adjudication, and is more expensive than arbitration, particularly where the parties mutually pick a single arbitrator. As a practical matter, to date, there have been no cases of arbitration over the LRSA or prior LRSAs, so the reliance on this dispute resolution mechanism has not yet been used.
Is there a U.S. government agency that provides guidance on ARIN’s role from the government perspective?
Yes, please see:
Consistent with the NTIA guidance, ARIN continues its stewardship and management of both legacy and non-legacy space within the ARIN region through community-developed policies.
For additional information regarding legal aspects of Internet number resources please refer to the following paper.
- Officer Attestation Information
- Registration Services Agreement (RSA) FAQ
- Registration Services
- Registration Services Agreement (RSA) FAQ
- Legacy RSA
- Officer Attestation
- Quick Guide to Requesting Resources
- Intro to ARIN’s Database
- Legacy Resource Services
- Number Resource Fraud Reporting
- IP Address Blocks ARIN Issues From
- ARIN Micro-allocations
- OriginAS Information