Your Number Resource Record Is a Part of the Internet's Infrastructure — Respect It Like One
As a Regional Internet Registry, ARIN issues Internet number resources to meet operational needs. Our database is a publicly searchable record of the registration data we maintain for every resource issued in our region. That includes legacy resources — the ones that predate ARIN’s founding.
The published data referencing legacy resources is still doing real work to facilitate how the Internet routes traffic, investigates abuse, and holds networks accountable. It is this data that ensures the uniqueness of the resources, and keeping it up to date is the responsibility of the organization holding those resources. Outdated information creates more potential for abuse and other problems than you might expect.
Problem 1: Stale/inaccurate data doesn’t just sit there; it gets used.
These outdated database records are a target for bad actors. Hijackers actively search for resources that appear abandoned, then work to impersonate the organization on file closely enough to attempt to take over its Org ID and Point of Contact records. From there, they can gain control of the resources themselves and persuade providers to start routing them. ARIN has updated its practices around the maintenance of this information significantly in attempting to mitigate this risk, but that doesn’t mean resource holders should be less diligent in ensuring the accuracy of their registration records.
Today, there are still many legacy resource records at risk. Of the roughly 17,000 legacy networks in ARIN’s database, about half have no Point of Contact or one that ARIN has not been able to verify:
- Only 11 percent have a contact record that’s currently validated.
- An additional 20 percent have a contact record on file but with incomplete information.
Compare that to organizations whose resources are under an ARIN agreement:
- 76 percent have a validated contact record.
- None have incomplete contact information.
The difference isn’t the paperwork that comes with an agreement; it’s that someone reviews the contact information and updates it as needed. Legacy holders can do exactly the same thing, and it takes less effort than you’d think.
The Solution: Validation is fast, and it’s already built into your account.
Under ARIN’s Number Resource Policy Manual section 3.6, every registered Admin, Tech, NOC, and Abuse Point of Contact gets an annual email to confirm their information is still accurate. It takes one click if that’s the case. If nobody responds within 60 days, the record is marked invalid — which limits what you can do in ARIN Online until it’s fixed. That invalid state is also visible in the public database, which is exactly the kind of signal hijackers look for.
You can also validate anytime by logging in directly. Either way, this provides a quick way to make sure your organization’s resources aren’t an easy target.
Problem 2: Your data must stand up to scrutiny when it matters most.
Out-of-date information can make it harder for you to take legitimate actions to manage your organization’s resources. If you want to transfer unused resources to someone who needs those resources, it will be much more difficult if your account is not updated. If someone needs to verify you are the legitimate holder of the space you are routing, you’ll be required to update your registration data before you can proceed. By making sure your data is current, you can avoid potential costly delays.
The Solution: ARIN Online puts this in your hands.
You are not required to enter an agreement to fix this. Log in to ARIN Online (create an account if you haven’t already), and you can:
- Update contact information,
- Manage reverse DNS,
- Adjust organization details, and
- Validate your Point of Contact.
If you already have a Point of Contact that is not linked to your ARIN Online account, then you can link to it under Your Account > Point of Contact Records. Once linked, you will be able to see all Internet number resources and Organization IDs associated with your POC handle. Instructions for linking Points of Contact can be viewed on the Point of Contact Records page.
The Myth That Keeps Holding People Back
Updating your registration data, requesting IPv6 resources, or initiating a transfer will not trigger any changes to your legacy resources, and it does not require an ARIN Registration Services Agreement. The only time an agreement comes into play is if you choose to use a service that requires one — like Resource Public Key Infrastructure, the Internet Routing Registry, or certain transfer types. Everything else, including keeping your registration data accurate, is yours to manage independently.
Why This Is Worth Doing Now
Stewardship isn’t a one-time transaction. It’s an ongoing responsibility that comes with being authorized to manage a piece of shared Internet infrastructure. Keeping your registration data accurate is one of the simplest ways to hold up your end of that responsibility, and it protects your own resources in the process. If it’s been a while since you checked yours, now is a good time.
Log in to ARIN Online to validate your Point of Contact, or submit an Ask ARIN ticket with any questions.
Recent blogs categorized under: Data Accuracy
GET THE LATEST!
Sign up to receive the latest news about ARIN and the most pressing issues facing the Internet community.
SIGN ME UP →Blog Categories
Data Accuracy • Training • Tips • IPv6 • IPv4 • Guest Post • Fellowship Program • ARIN Bits • Elections • Customer Feedback • Outreach • Internet Governance • Public Policy • RPKI • Caribbean • Grant Program • Updates • Security • IRR • Business Case for IPv6
