Class B and RPKI

The Government Accountability Office (GAO) is soliciting bids under RFQ 05GA0A26Q0053 to secure Brand Name American Registry for Internet Numbers (ARIN) services or services equal to those offered by ARIN for the protection and management of its Class B IP address block and Autonomous System Number (ASN). The contract, set to run from August 7, 2026, to August 6, 2027, requires the contractor to provide Resource Public Key Infrastructure (RPKI) and Internet Registry (IRR) services that ensure the secure allocation and administration of IPv4 and IPv6 resources, maintain accurate public Whois/RDAP databases, and support cryptographic validation of BGP routing to prevent route hijacks and leaks. Compliance with NIST SP 800-53, NIST SP 800-171, FISMA, CMMC, and ARIN’s Number Resource Policy Manual is mandatory, and the contractor must guarantee 99.9% system availability, process IP/ASN change requests within five business days, notify GAO of policy changes within 48 hours, and manage Route Origin Authorizations (ROAs) in alignment with IETF standards. The award will be made using the Lowest Price Technically Acceptable (LPTA) methodology, meaning all submissions must first meet minimum technical acceptability thresholds before pricing is considered. For vendors proposing ARIN’s brand name services, proof of authorized reseller status is required; for those offering “equal” services, a detailed comparison demonstrating compliance with Attachment I’s Salient Characteristics must be submitted. All proposals must include pricing for CLIN 0001, submitted exclusively via email to GAO contracting personnel by 10:00 AM Eastern Time on July 24, 2026. The contract is Firm Fixed Price with no options, and payment will be processed exclusively through the Treasury’s Invoice Processing Platform (IPP); WAWF is not acceptable. Contractors must ensure all personnel are U.S. citizens or lawful permanent residents, undergo GAO-determined security screening based on position sensitivity—including High Risk Public Trust roles—and sign indefinite Non-Disclosure Agreements (NDAs), which must be flowed down to subcontractors and submitted to the Contracting Officer. All employees handling GAO data must pass background checks at the contractor’s expense, and the contract includes stringent clauses on whistleblower rights, anti-kickback procedures, labor standards, privacy training,