Your IP address could not be determined at this time.

Trust Anchor Locator (TAL)

Using RPKI Routing as a Relying Party

To act as an RPKI relying party and retrieve data from ARIN's RPKI database, entities should use an RPKI Validator and ARIN's Trust Anchor Locator (TAL).The TAL contains both the location of ARIN's repository and ARIN's public key, which is used to cryptographically verify that ARIN has signed the artifacts within ARIN's repository. RPKI validators can then verify the certificates and ROAs within the repository. 

Follow these steps:

  1. Download a validation tool, such as the RIPE NCC RPKI Validator. (You can also use other validators such as that from Dragon Research or RPSTIR.)
  2. If using the RIPE NCC RPKI Validator, it contains the TALs from these individual IRRs: AFRINIC, APNIC, LACNIC, and RIPE NCC. It doesn't include the ARIN TAL. Download the ARIN TAL (linked below; choose RIPE NCC RPKI Validator format).
  3. Transfer the TAL to your routing policy engine using one of the following methods:
    1. Direct transfer to the router using RTR protocol
    2. Transfer using custom scripts and the REST API
    3. Transfer as RPSL objects

ARIN recommends reading RFC 6810: The Resource Public Key Infrastructure (RPKI) to Router Protocol to learn more about transferring RPKI information to routers.

ARIN TAL

ARIN publishes all Certificates, Certificate Revocation Lists (CRLs), and RPKI-signed objects in its Resource Public Key Infrastructure (RPKI) Repository. The ARIN Repository is available to anyone under the terms and conditions in the Relying Party Agreement.

ARIN¹s Trust Anchor Locator (TAL) is used to retrieve and verify ARIN's Resource Public Key Infrastructure (RPKI) Repository.

The ARIN TAL is available in three formats.

Please right click and save the format you would like.

Search Related Content

Loading

full site search

Registration Services Help Desk

Interacting With ARIN

Monday through Friday
7:00 AM to 7:00 PM ET
Phone: +1.703.227.0660
Fax: +1.703.997.8844
Email: hostmaster@arin.net
Tips for Calling the Help Desk