ARIN 53 Day 2 Recap

By Christina Paladeau – Social Media and Content Specialist

Welcome back for your Day Two recap of the ARIN 53 Public Policy and Members Meeting in Bridgetown, Barbados, and online via Zoom. Today’s highlights included reports from ARIN Community Grant recipients, presentations by ARIN staff, the second policy block of the meeting, and updates from each of the other Regional Internet Registries (RIRs). Thanks to everyone who has joined us so far — we’ll see you again tomorrow at 9 AM AT/ET for the final day of the meeting.

If you wish to participate in the meeting proceedings, it’s still not too late to register.

Anchors Aweigh

Setting us on course for the day, Director of Communications Hollis Kara welcomed all attendees and introduced the Day Two agenda. She then turned the stage over to Chief Technology Officer Mark Kosters, who presented the report from the Engineering Department. He reviewed all the services ARIN provides and highlighted recent statistics, software releases, operational improvements, and what’s next for the team (including a reminder that SWIP email templates are going away). Follow-up questions focused on privacy and security considerations related to geolocation and multifactor authentication (MFA) were answered by Mark and ARIN President and CEO John Curran along with an Internet service provider (ISP) perspective on RDAP, geolocation, and privacy concerns provided by meeting participant Louie Lee.

Then we heard the update from Chief Information Security Officer Christian Johnson. He shared an overview of “the who and how” of security at ARIN, updates on security goals and processes, and details of our compliance initiatives and timelines, including System and Organization Control (SOC) 2 and Payment Card Industry Data Security Standard (PCI DSS). Christian emphasized the importance of focusing on the fundamentals like training, reporting, maintenance, and identifying and remediating vulnerabilities. He also asked the community to share their thoughts on what pieces of ARIN infrastructure should be next on the list of priorities for SOC 2 certification (following the completion of ARIN Online in 2025).

Brad Gorman, Senior Product Owner for Routing Security, was up next with his presentation on routing security. Along with reviewing the benefits of Resource Public Key Infrastructure (RPKI) and the RPKI services ARIN offers, he gave updates on global RPKI activity, adoption and coverage rates in the ARIN region, and new and upcoming features for ARIN’s services, including a new BGP security product that will provide users of RPKI services with additional information based on the current BGP state and the reintroduction of RPKI/Internet Routing Registry integration.

Attending ARIN 53 in person and interested in learning more about RPKI? Stick around after the meeting concludes tomorrow morning for a hands-on RPKI Deployathon with Brad!

Then we were excited to welcome the first of three 2023 ARIN Community Grant recipients for reports on their funded projects. Chris Grundemann of FullCtl shared about the project “Open Source RegCtl & PrefixCtl." He covered the goals of Registration Control and Prefix Control software to provide standardized, normalized, and contextualized Registration Data Access Protocol and Route Origin Authorization information management across Regional Internet Registries, the problems they solve, and current status, timelines, and demos of the project’s work.

Going Global

After a short break, Sofía Silva Berenguer, Program Manager for the Number Resource Organization’s new RPKI Program, introduced the program, the team behind it, and its goal to provide a more consistent and uniformly secure, resilient, and reliable RPKI service. Learn more in this blog post: Improving Regional Internet Registry Alignment in the RPKI Space.

Next, we heard updates from each of the four other Regional Internet Registries (RIRs), presented by our colleagues: Musa Stephen Honlue, Project Manager and Transformation Lead, AFRINIC; Paul Wilson, Director General, APNIC; Kevon Swift, Head of Strategic Relations and Integration, LACNIC; and Hans Petter Holen, Managing Director and CEO, RIPE NCC. It was great to hear what our fellow RIRs are up to in their respective regions and acknowledge the hard work going on in support of Internet security and stability around the world. Following the APNIC Update, ARIN Board of Trustees Chair Bill Sandiford took a moment to recognize Paul Wilson’s upcoming retirement and his contributions to our industry, noting that he has been a leader in the Internet governance and RIR communities as a whole and offering thanks and best wishes on behalf of the ARIN community and staff, past and present.

Before heading into the second and final policy block of ARIN 53, we paused for a lunch break during which the Board of Trustees hosted a luncheon with Caribbean stakeholders to build relationships and develop a deeper understanding of regional challenges and opportunities.

During lunch and our other breaks throughout each meeting day, in-person attendees could stop by the Registration Services Help Desk to get questions answered and get support for any resource requests they’re currently working on or planning to submit.

Policy Block

The meeting’s policy discussions, which began yesterday, continued as Advisory Council members presented each of the following draft and recommended draft policies and then Bill Sandiford opened the floor for community members to provide input, ask questions, and provide a show of support (in the case of recommended draft policies).

• Recommended Draft Policy ARIN-2023-5: Clean-up of NRPM Sections 4.3.4, 4.4, 4.10 and 6.10.1 – presented by Alison Wood
• Recommended Draft Policy ARIN-2023-7: Clarification of NRPM Sections 4.5 and 6.11 Multiple Discrete Networks – presented by Chris Woodfield
• Recommended Draft Policy ARIN-2023-6: ARIN Waitlist Qualification – presented by Alicia Trotman
• Draft Policy ARIN-2023-8: Reduce 4.1.8 Maximum Allocation – presented by Gerry George
• Draft Policy ARIN-2024-2: WHOIS Data Requirements Policy for Non-Personal Information – presented by Leif Sawyer

Going With the Flow

With the policy discussions completed, we returned to our 2023 Grant Project Reports. James Harr of Internet2 discussed the project “IPv6 Test Pod.” His presentation included a look at events in the history of IPv6, measuring IPv6 adoption, IPv6-only networks and transition technologies, the process of getting a lab set up for the IPv6 Test Pod project, and the project’s current status, target users, and timeline.

Read more about these projects in this blog post: Announcing the 2023 ARIN Community Grant Recipients.

The third and final grant report was delivered by Harlan Stenn of Network Time Foundation, who discussed the project on the NTP TCP Services Daemon. He provided background on the Network Time Protocol (NTP) and Transmission Control Protocol (TCP), explained the design and development prep for the daemon, and shared a status report and next steps for the project.

Interested in applying for an ARIN Community Grant for your project that benefits the ARIN region? Visit arin.net/grants for more info and subscribe to our ARIN Announce mailing list to be alerted when this year’s call for applications opens in a few days on Monday, 22 April.

After one more break to keep the energy up, we rounded out the afternoon with a couple more updates. First, General Counsel Michael Abejuela presented the Legal Update, which introduced ARIN’s in-house legal team and explained its roles in administration and operations, supporting ARIN volunteers (the Board, AC, and NRO Number Council), fraud investigations, and legislative activities.

Then we heard about new Training Initiatives from Hollis Kara. She shared a sneak peek at the learning management system in development and how, when, and what you can expect to learn in ARIN’s new training platform. Optimism is high that it will launch with an “ARIN Online Basics” course and certificate before the end of the year, with courses on topics like routing security and IPv6 to follow. You can get involved from the beginning by emailing training@arin.net to contribute ideas for e-learning modules and to volunteer to participate in user testing.

John Curran and Bill Sandiford hosted a lively open mic session at the end of the day and fielded questions and comments on topics ranging from staff training on policy changes and the new training platform to IPv6, reinstating resources, and a policy proposal idea regarding justification for address space. Hollis Kara closed with final announcements and adjournment to conclude Day Two of ARIN 53.

An Island-Inspired Evening

Yesterday evening, in-person attendees had the opportunity to enjoy the warm ocean breezes, Bajan cuisine, and relaxing atmosphere under the palm trees and string lights at The Boatyard in Bridgetown.

To reference anything that has been presented during the meeting so far, visit our ARIN 53 Meeting Materials page. All slides have been posted there, and we will be adding transcripts and webcasts soon, too. We encourage you to continue posting on X, LinkedIn, and Facebook with the #ARIN53 hashtag, and we look forward to the third and final day of the meeting tomorrow.

Recent blogs categorized under: Public Policy

• ARIN 54 Day 2 Recap
• ARIN 54 Day 1 Recap
• Get to Know the Draft Policies Up for Discussion at ARIN 54
• Building and Sustaining Caribbean Digital Infrastructure with IXPs and IPv6 Technologies