Routing Security Update#
ARIN 56 Public Policy and Members Meeting digest Program Core pick 30–31 October 2025
Brad Gorman, Director of Customer Technical Services, ARIN
- Why: RPKI is now table stakes for anyone announcing space, and this is the one session with concrete adoption data plus ARIN's roadmap for ROA tooling. Directly relevant to BGP/routing security work.
- What: A data-driven state-of-RPKI report plus new features. Global RPKI-valid share of announced space rose from ~54% (Dec 2024) to ~57% IPv4 / ~59% IPv6 (Sep 2025, per NIST's monitor), with ARIN openly asking whether a plateau is coming. 7,612 organizations now use ARIN's RPKI services (39% YoY growth); 97.8% choose hosted RPKI, only 161 run delegated (88 of those on ARIN's Repository Publication Service). 47.1% of ARIN-allocated IPv4 is RPKI-valid. New shipped: ROA Modify, a year of ROA change history with CSV export, automatic ROA re-rolling during resource transfers, and ASPA object support in OT&E.
- How: The interesting roadmap items are "RPKI Routing Intelligence" (show users live BGP announcements against their certificate, explain RPKI-invalid states, and offer a fix-the-ROA flow) and RPKI for reallocated/reassigned resources — letting direct holders delegate RPKI decision rights to downstream recipients, revocable at any time.
- Where applicable: Any org announcing ARIN-region space; the hosted-vs-delegated guidance is broadly applicable. ASPA support in OT&E is an early signal for anyone planning ASPA adoption. Entity-type data (gov at 18.4% org adoption but 6.7% prefix coverage) is ARIN-region-specific.