<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle19
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.im
{mso-style-name:im;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:212928868;
mso-list-type:hybrid;
mso-list-template-ids:390480810 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The text of 2017-3 that we presented at our last meeting attempts to address the problem of whois inaccuracy by removing reverse DNS entries for organizations that lack validated POC records as well as removing their resources from the
public whois database. The feedback we’ve received for this option has been largely negative, so we are looking to get some feedback on alternative solutions.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">A revised draft is included below that proposes instead to remove access to ARIN Online for organizations that lack a validated tech or admin POC. Other options have also been proposed that we would like your feedback on. Those include:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Requiring organizations to validate their POCs at the time of creation. POCs for organizations that have received a reallocation from their upstream must validate both that the POC contact information is correct and that their organization
information is correct. <o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Requiring POCs for reallocated space to validate their information prior to the reallocation being visible in public whois.<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Removing ARIN Online access to upstream ISPs until every reallocation made from their direct allocation has validated POCs. Upstream ISPs would not be able to validate the POCs of their downstream recipients of reallocations. Only the
actual recipients of the reallocation would be able to validate their own POCs (i.e. upstream ISPs would be dependent on the actions of their downstream customers, and would lose ARIN Online access if their customers did not validate the information the upstream
provided for them in ARIN’s whois). Some interesting stats were provided by staff to help us flesh out the feasibility of this idea. Those stats are included at the very bottom of this message.
<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">4.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Proposed revised text below.<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">5.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Any other ideas?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Proposed revised text <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white">
<b><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">Policy statement:</span></b><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">Current text: <o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">3.6 Annual Whois POC Validation<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">3.6.1 Method of Annual Verification<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">During ARIN's annual Whois POC validation, an email will be sent to every POC in the Whois database. Each POC will have a maximum of 60 days to respond with an affirmative that their
Whois contact information is correct and complete. Unresponsive POC email addresses shall be marked as such in the database. If ARIN staff deems a POC to be completely and permanently abandoned or otherwise illegitimate, the POC record shall be marked invalid.
ARIN will maintain, and make readily available to the community, a current list of number resources with no valid POC; this data will be subject to the current bulk Whois policy.<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">Proposed revised text:<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">3.6 Annual Validation of ARIN's Public Access WHOIS Point of Contact Data<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">3.6.1 Annual POC Verification <o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">ARIN will perform an annual verification of point of contact data each year on the date the POC was registered, beginning on January 1 each year using the procedure provided in 3.6.4.<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">3.6.2 Specified Public WHOIS Points of Contact for Verification<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">Each of the following Points of Contact are to be verified annually and will be referred to as Points of Contact throughout this policy:<br>
- Admin<br>
- Tech<br>
- NOC<br>
- Abuse<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">3.6.3 Organizations Covered by this Policy<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">This policy applies to every Organization that holds a direct assignment, direct allocation, AS number or reallocation from ARIN. This includes but is not limited to upstream ISPs and
downstream ISP customers (as defined by NRPM 2.5 and 2.6), but not reassignments made to downstream customers or end user customers. <br>
<br>
3.6.4 ARIN Staff Procedure for Verification<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">Email notification will be sent to each of the Points of Contact in section 3.6.2 on an annual basis. Each Point of Contact will have up to sixty (60) days from the date of the notification
in which to respond with confirmation as to the public WHOIS contact data or to submit data to correct and complete it. Validation can occur via the ARIN Online account, or, alternatively, by clicking the validation link in the email notification. After the
sixty (60) day period, non-responsive Point of Contact records will be marked as "non-responsive" in the public WHOIS directory.
<br>
<br>
3.6.5 Non-Responsive Point of Contact Records <o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">After an additional ninety (90) days after the Point of Contact record has been marked as "non-responsive", ARIN's staff after through research and analysis, will mark those non validated,
abandoned or otherwise illegitimate POC records "invalid". Organizations lacking a valid Tech or Admin POC will lose access to their ARIN Online account until a Tech or Admin POC has been validated.
<o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<b><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">Comments:</span></b><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p>
<p style="mso-margin-top-alt:4.8pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:black">a. Timetable for implementation: to be based upon discussions with ARIN's staff. <br>
b. Anything else<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">***<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Reallocation stats provided by staff…<o:p></o:p></b></p>
<p class="MsoNormal"><span class="im"><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#500050;background:white">1) Could we get a breakdown of the number of nets in whois, how many are direct allocations, reallocations, and reassignments?</span></span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#500050;background:white"><br>
<br>
</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#222222;background:white"># of nets in Whois: 3,161,723</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#222222"><br>
<span style="background:white"># direct allocation: 23,661</span><br>
<span style="background:white"># direct assignment: 35,751</span><br>
<span style="background:white"># reallocations: 89,607</span><br>
<span style="background:white"># detailed reassignments: 511,637</span><br>
<span style="background:white"># simple reassignments: 2,502,016 (note: simple reassignments have no point of contact information)</span><br>
<br>
<span style="background:white">Note: This includes both legacy and non-legacy.</span><br>
</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#500050;background:white"><br>
<br>
<br>
<span class="im">2) How many Org's have made reallocations? Not how many reallocations as the previous question, but how many org's with direct allocations have made reallocations.</span><br>
<br>
</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#222222;background:white">There are 5,590 Org IDs with one or more direct allocations. Of those, 648 (12%) have made one or more reallocations and 4,942 (88%) have no reallocations.
Note that this excludes legacy direct allocations as well as self-reallocations (reallocations made to the same Org ID as the direct allocation).</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#222222"><br>
</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#500050;background:white"><br>
<br>
<br>
<span class="im">3) Of the Direct Allocations, what is the average and median number of reallocations associated to the direct allocations?</span><br>
<br>
</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#222222;background:white">There are 2,205 direct allocations with one or more reallocations.</span><span style="font-size:9.5pt;font-family:"Arial","sans-serif";color:#222222"><br>
<br>
<span style="background:white">The maximum number of reallocations under a single direct allocation is 31,500. (Note: This is a IPv6 Direct Allocation)</span><br>
<br>
<span style="background:white">The mean number of reallocations under a direct allocation (counting only direct allocations with one or more reallocations) is 37.</span><br>
<br>
<span style="background:white">The median number of reallocations under a direct allocation (counting only direct allocations with one or more reallocations) is 3.</span><br>
<br>
<span style="background:white">And, just for statistical completeness, the mode (# that occurs most frequently) is 1.</span><br>
<br>
<span style="background:white">As another datapoint:</span><br>
<br>
<span style="background:white">1,648 direct allocations have 1-9 reallocations (Those nets have a total of 4,327 reallocations, 5% of the reallocations).</span><br>
<span style="background:white">465 direct allocations have 10-99 reallocations (Those nets have a total of 13,322 reallocations, 16% of the reallocations)</span><br>
<span style="background:white">92 have 100+ reallocations (Those nets have a total of 64,895 reallocations, 79% of the reallocations).</span><br>
<br>
<br>
<br>
<span style="background:white">3b) As a companion to the above, we ran the numbers on a per-Org ID basis.</span><br>
<br>
<span style="background:white">There are 648 Org IDs with one or more reallocations.</span><br>
<br>
<span style="background:white">The maximum number of reallocations under a single Org ID is 31,504.</span><br>
<br>
<span style="background:white">The mean number of reallocations under a direct allocation (counting only direct allocations with one or more reallocations) is 127.</span><br>
<br>
<span style="background:white">The median number of reallocations under a direct allocation (counting only direct allocations with one or more reallocations) is 3.</span><br>
<br>
<span style="background:white">And, just for statistical completeness, the mode (# that occurs most frequently) is 1.</span><br>
<br>
<span style="background:white">As another datapoint:</span><br>
<br>
<span style="background:white">454 Org IDs have 1-9 reallocations (1,256 total reallocations)</span><br>
<span style="background:white">160 Org IDs have 10-99 reallocations (4,805 total reallocations)</span><br>
<span style="background:white">34 Org IDs have 100+ reallocations (76,486 total reallocations)</span></span><o:p></o:p></p>
</div>
</body>
</html>