<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi Scott,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I will draft something very simple to start, but I don’t know if it’s section 4, 8, or somewhere else.<o:p></o:p></p><p class=MsoNormal>What do you suggest?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I wonder if we could say that ARIN would have the right to see the LOA if there was an abuse complaint filed?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>There is a field for origin AS in a detailed SWIP… Maybe it can be utilized to designate the LOA recipient?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Regards,<br>Mike<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Scott Leibrand <scottleibrand@gmail.com> <br><b>Sent:</b> Thursday, May 30, 2019 10:27 AM<br><b>To:</b> Mike Burns <mike@iptrading.com><br><b>Cc:</b> arin-ppml <arin-ppml@arin.net><br><b>Subject:</b> Re: [arin-ppml] IP leasing policy<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>The portion that would be within scope as ARIN policy would be any requirements to publish reassignment information in the ARIN database. However, we would need further discussion on whether/how such requirements would be enforceable: for example, are there any grounds for eventually revoking improperly registered reassignments of IP space?<br><br>Routing is outside ARIN’s purview, so probably the best we can do there is document what kind of information is expected to be provided in an LOA, and how that interacts with any reassignment information published to ARIN. We might want to do something like require registration of the fact that space is reassigned, including things like start and expected end date of the reassignment, even if the identity of the assignee is kept confidential. That way anyone validating an LOA can at least verify that the space to be routed is reassigned to someone, and hasn’t been revoked. Or you could provide a public-key field in the public reassignment record, so that the LOA could include a private-key signature that allows for validation of its validity without having to publish the info it contains. (This starts to sound like a form of RPKI.)<o:p></o:p></p><div id=AppleMailSignature><div><p class=MsoNormal>Scott<o:p></o:p></p></div></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br>On May 30, 2019, at 7:01 AM, Mike Burns <<a href="mailto:mike@iptrading.com">mike@iptrading.com</a>> wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>Hi Scott,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>I would draft a policy in order to foster discussion, but I’m not sure I would approve it myself yet.<o:p></o:p></p><p class=MsoNormal>The concept would benefit from more discussion; it’s half-baked.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Can I get assurance that a lease policy would be within our scope as policymakers from a person better positioned to make the call?<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Regards,<br>Mike<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Scott Leibrand <<a href="mailto:scottleibrand@gmail.com">scottleibrand@gmail.com</a>> <br><b>Sent:</b> Thursday, May 30, 2019 1:23 AM<br><b>To:</b> Mike Burns <<a href="mailto:mike@iptrading.com">mike@iptrading.com</a>><br><b>Cc:</b> arin-ppml <<a href="mailto:arin-ppml@arin.net">arin-ppml@arin.net</a>><br><b>Subject:</b> Re: [arin-ppml] IP leasing policy<o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>On May 29, 2019, at 5:13 PM, Mike Burns <<a href="mailto:mike@iptrading.com">mike@iptrading.com</a>> wrote:<o:p></o:p></p><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>Hi Scott and Fernando,</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'> </span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>Thank you for the change of subject and the discussion.</span><o:p></o:p></p></div></div></div></blockquote><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>For the present, we should have a policy that recognizes legitimate leasing types (LOA, VPN) and requires the same sorts of assignment and delegation records commonly done by ISPs for their customers.</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>It should recognize that blocks can be legitimately advertised under un-related ASNs with a valid Letter of Authorization, which must contain certain information.</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>It could have a process for identifying ARIN members who are participating in a lease policy violation, for notifying them, and for potentially punishing them under RSA terms.</span><o:p></o:p></p></div></div></div></blockquote><p class=MsoNormal> <o:p></o:p></p><div><p class=MsoNormal>I would support such a policy. Would you be interested in drafting it?<br><br><br><br><o:p></o:p></p><div><p class=MsoNormal>Scott<o:p></o:p></p></div></div></div></blockquote></div></body></html>