Public Incident Report – ARIN Hosted RPKI Service

Posted: Monday, 27 October 2025

Summary

On 23 October 2025, ARIN received a customer report of an issue affecting the Hosted Resource Public Key Infrastructure (RPKI) service following the recent deployment of the Route Origin Authorization (ROA) Support for Transfers feature. ARIN immediately paused in-process transfers and began a full review of the system to identify the scope and cause of the issue.

Findings

The review determined that the issue was limited to a specific ROA configuration condition and that only one customer was impacted. The Hosted RPKI service otherwise continued to operate as expected.

Resolution

ARIN’s engineering team identified the underlying code defect, developed a fix, and successfully deployed it to production on 27 October 2025 at 10:00 AM ET. Transfer operations have been re-enabled, and additional validation steps have been added to prevent recurrence.

Customer Guidance

ARIN encourages Hosted RPKI participants to periodically review their ROA configurations. Specifically, if you are the source organization in a transfer, check the validity of your ROAs before and after the transaction. Whenever practical, modify any ROAs associated with the resource prior to transfer to help ensure routing accuracy and prevent invalid states. Visit our FAQ and Best Practices page for more information.

ARIN takes all service issues seriously and appreciates the community’s patience and cooperation. We remain committed to maintaining a secure and reliable Hosted RPKI environment.

Regards,

American Registry for Internet Numbers (ARIN)