<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
On 5 Apr 2022, at 12:21 AM, Dan Mahoney (Gushi) <<a href="mailto:danm@prime.gushi.org" class="">danm@prime.gushi.org</a>> wrote:<br class="">
<div>
<blockquote type="cite" class=""><br class="">
<div class="">
<div class="">John (C), just out of curiosity, is there a good count of how many of these resources exist (i.e. legacy resources without an LRSA?). If you can easily say an aggregate number I'm curious.<br class="">
</div>
</div>
</blockquote>
<div><br class="">
</div>
In terms of IPv4 address space not under contract, less and less each year… About 42% of the ARIN registry space is legacy resources not under contract, and this has been steadily dropping. It was obviously 100% at ARIN’s formation, and presently slope is
about -3% per year.</div>
<div><br class="">
</div>
<div>In terms of organization count - </div>
<div><br class="">
</div>
<blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;" class="">
<div>16,000+ Members (organizations that have a valid ARIN Registration Services Agreement (RSA or LRSA) for IPv4 and/or IPv6 address space are Service Members of ARIN, and any in good standing can opt to be a General Member with voting rights.) </div>
<div>
<div class=""><br class="">
</div>
</div>
<div>
<div class="">In addition, ARIN serves approximately 15,000 Legacy customers which hold IPv4 Internet number resources that are not currently covered under any type of RSA or LRSA with ARIN.</div>
</div>
<div>
<div class=""><br class="">
</div>
</div>
<div>
<div class="">In addition, ARIN also serves approximately 7,600 ASN-only organizations.</div>
</div>
</blockquote>
<div>
<div class=""><br class="">
</div>
<div class="">Source: <<a href="https://www.nro.net/about/rirs/" class="">https://www.nro.net/about/rirs/</a>></div>
</div>
<div>
<div class="">
<div class=""><br class="">
</div>
</div>
<blockquote type="cite" class="">
<div class="">
<div class="">Is there a count of how many of these are present in the DFZ, or that are being announced by larger netblocks, or which do not show in the BGP table at all?<br class="">
</div>
</div>
</blockquote>
<div><br class="">
</div>
Excellent question, and the answer is unknown. The fact that such a statistic is not easy to derive from public information is something that was recently brought to my attention and we will work to fix shortly.</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">
<div class="">Given, this is a list of potentially-hijackable address blocks, so I don't know that such a thing should be posted publicly, but I could see research being done with the full set under a confidentiality agreement. (If such a thing has been done,
please point me at it).<br class="">
</div>
</div>
</blockquote>
<div><br class="">
</div>
I have not seen such work done. <br class="">
<div class="">
<div class=""><br class="">
</div>
</div>
<blockquote type="cite" class="">
<div class="">
<div class="">This feels like an interesting research presentation/lightning talk/something to me, relevant in the world where we're talking about declawing third party registries.</div>
</div>
</blockquote>
<br class="">
</div>
<div>We do provide bona fide researchers bulk access to registry data <<a href="https://www.arin.net/reference/research/bulkwhois/" class="">https://www.arin.net/reference/research/bulkwhois/</a>> (and could provide additional instrumentation if necessary for
such a research activity.) </div>
<div><br class="">
</div>
<div>FYI,</div>
<div>/John</div>
<div><br class="">
</div>
<div>
<div>John Curran</div>
<div>President and CEO</div>
<div>American Registry for Internet Numbers</div>
</div>
<div><br class="">
</div>
</body>
</html>