[arin-tech-discuss] [arin-announce] Resource Public Key Infrastructure (RPKI) Now Available to ARIN Customers

[Jay Borkenhagen]

OK, I'll bite: 

When an ARIN resource holder publishes ROAs in ARIN's RPKI, it is
clear that they want the entire RPKI universe to be able to see those
ROAs and all the supporting records, to reduce the likelihood that
networks around the world will believe hijack attempts.

Requiring 'those wishing to validate RPKI information' to click
'accept' or to take any other explicit action only gets in the way of
achieving that goal.


Therefore: please publish the ARIN TAL openly to maximize the utility
of the RPKI to ARIN's resource holders.



On 17-September, Mark Kosters wrote on arin-announce:
 > ARIN is proud to announce that ARIN resource holders with either a 
 > signed RSA or LRSA may now participate in RPKI through ARIN Online. 
 > Additionally, those wishing to validate RPKI information may do so after 
 > requesting a Trust Anchor Locator (TAL). ARIN's TAL is required to 
 > validate information from ARIN's RPKI repository.
 > 
 > RPKI is a free, opt-in service that allows users to certify their 
 > Internet number resources to help secure Internet routing. This 
 > initiative has been developed within the IETF's SIDR Working Group, with 
 > involvement from Regional Internet Registries (RIRs), and numerous 
 > Internet Service Providers (ISPs).
 > 
 > ARIN encourages members of the Internet community to certify their 
 > resources through RPKI. Internet routing today is vulnerable to 
 > hijacking and the provisioning/use of certificates is one of steps 
 > required to make routing more secure.  Widespread RPKI adoption will 
 > help simplify IP address holder verification and routing decision-making 
 > on the Internet.
 > 
 > ARIN plans to continually review and improve RPKI based upon user 
 > feedback. Users are encouraged to report any issues via the 
 > arin-tech-discuss mailing list.
 > 
 > For more information about this crucial step in securing Internet 
 > routing as well as future enhancement plans, visit ARIN's RPKI Home 
 > Pageat https://www.arin.net/resources/rpki/index.html.
 > 
 > Regards,
 > 
 > Mark Kosters
 > 
 > Chief Technical Officer (CTO)
 > 
 > American Registry for Internet Numbers (ARIN)
 >