<div dir="ltr"><div><br>[Note, this proposal was made directly by law enforcement. Thanks for the transparency.]<br><br></div><div>Not in favor. Some of this is workable, some not. I'm pretty sure ARIN already provides significant hurdles for people to receive their initial allocations. It's not entirely clear to me what they are trying to accomplish. The objectives around operational abuse and depletion are no ops.<br>
<br></div><div>If we're trying to keep bad actors from acquiring addresses, there are better ways to do this. If we are trying to identify bad actors using resources, contact the registrant of the allocation for subsriber data (authoritative billing data) which is far more accurate than anything ARIN could ever provide.<br>
<br><br></div><div>Best,<br><br></div><div>-M<<br><br><br></div><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Jun 25, 2013 at 11:39 AM, ARIN <span dir="ltr"><<a href="mailto:info@arin.net" target="_blank">info@arin.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Draft Policy ARIN-2013-6<br>
Allocation of IPv4 and IPv6 Address Space to Out-of-region Requestors<br>
<br>
On 20 June 2013 the ARIN Advisory Council (AC) accepted "ARIN-prop-189 Allocation of IPv4 and IPv6 Address Space to Out-of-region Requestors" as a Draft Policy.<br>
<br>
Draft Policy ARIN-2013-6 is below and can be found at:<br>
<a href="https://www.arin.net/policy/proposals/2013_6.html" target="_blank">https://www.arin.net/policy/<u></u>proposals/2013_6.html</a><br>
<br>
You are encouraged to discuss the merits and your concerns of Draft Policy 2013-6 on the Public Policy Mailing List.<br>
<br>
The AC will evaluate the discussion in order to assess the conformance of this draft policy with ARIN's Principles of Internet Number Resource Policy as stated in the PDP. Specifically, these principles are:<br>
<br>
* Enabling Fair and Impartial Number Resource Administration<br>
* Technically Sound<br>
* Supported by the Community<br>
<br>
The ARIN Policy Development Process (PDP) can be found at:<br>
<a href="https://www.arin.net/policy/pdp.html" target="_blank">https://www.arin.net/policy/<u></u>pdp.html</a><br>
<br>
Draft Policies and Proposals under discussion can be found at:<br>
<a href="https://www.arin.net/policy/proposals/index.html" target="_blank">https://www.arin.net/policy/<u></u>proposals/index.html</a><br>
<br>
Regards,<br>
<br>
Communications and Member Services<br>
American Registry for Internet Numbers (ARIN)<br>
<br>
<br>
## * ##<br>
<br>
<br>
Draft Policy ARIN-2013-6<br>
Allocation of IPv4 and IPv6 Address Space to Out-of-region Requestors<br>
<br>
Date: 25 June 2013<br>
<br>
Problem Statement:<br>
<br>
ARIN number resources should be used primarily in the ARIN region, for ARIN region organizations. There is currently no explicit policy guiding staff in this area, this proposal seeks to correct that.<br>
<br>
Policy Statement:<br>
<br>
Any entity (individual or organization) requesting ARIN issued IP blocks must provide ARIN with proof of an established legal presence in the designated ARIN region, and have a majority of their technical infrastructure and customers in the designated ARIN region. This requirement applies to both IPv4 and IPv6 address space.<br>
<br>
Comments:<br>
<br>
The proposal originator said, "Although we represent law enforcement, and have brought forth this issue based upon our concerns and experience from a law enforcement perspective, this is a problem in which the entire ARIN community has a stake".<br>
<br>
As reported at the last meeting in Barbados, ARIN staff is having difficulty verifying organizations out-of-region. In many of the cases, particularly in VPS (Virtual Private Service), the only information received on these organizations by ARIN is a customer name and IP address. This information cannot be properly verified by ARIN. Accuracy of registration data is critical to not only law enforcement, but the greater ARIN community as it relates to abuse contact and complaints. In fact, most issues facing law enforcement are also shared by legitimate companies attempting, for instance, to identify an organization that has hijacked their IP address space.<br>
<br>
The expedited depletion of IPv4 address space in the ARIN region certainly seems to negatively impact those organizations currently operating in the region that may need to return to ARIN for additional IPv4 address space. While law enforcementÂ’s concern is that criminal organizations outside of the ARIN region can easily and quickly request large blocks of IPv4 address space from ARIN, organizations that are not truly global organizations, but specific national companies from the RIPE and APNIC regions, also have this capability which is detrimental to true ARIN region organizations.<br>
<br>
This policy proposal is re-enforcing practices the ARIN staff currently employs to ensure that ARIN IP space is used for and by companies that are legitimate and have a legitimate presence in the ARIN region. This policy will assist in defining clear criteria that will be helpful to ARIN staff and the community.<br>
<br>
The primary role of RIRÂ’s is to manage and distribute public Internet address space within their respective regions. The problem brought forth here clearly undermines the current RIR model; if any organization can acquire IP address space from any region, what then is the purpose of the geographical breakdown of the five RIRs?<br>
______________________________<u></u>_________________<br>
PPML<br>
You are receiving this message because you are subscribed to<br>
the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" target="_blank">ARIN-PPML@arin.net</a>).<br>
Unsubscribe or manage your mailing list subscription at:<br>
<a href="http://lists.arin.net/mailman/listinfo/arin-ppml" target="_blank">http://lists.arin.net/mailman/<u></u>listinfo/arin-ppml</a><br>
Please contact <a href="mailto:info@arin.net" target="_blank">info@arin.net</a> if you experience any issues.</blockquote></div><br></div>