Skip to content

AutnumRecord

The AutnumRecord asset type in the OWASP Open Asset Model (OAM) represents authoritative registration data for an Autonomous System (AS), as provided by Regional Internet Registries (RIRs) via RDAP or legacy WHOIS. This includes ownership and operational metadata related to an Autonomous System Number (ASN)—the numeric identifier used in BGP routing.

  • Definition: An AutnumRecord contains parsed RDAP registration data about an ASN, including its number, handle, registered name, lifecycle dates, and optional status flags. It also includes the raw source text for auditing or secondary parsing.

  • Purpose: Modeling AS registration data as a distinct asset allows analysts to pivot from infrastructure to attribution, understand who controls internet routing authority, and detect AS-level behavior changes (e.g., hijacks, acquisitions, multi-homing). It supports graph queries like “which ASNs are linked to a given organization?” or “what netblocks does a registered AS announce?”

  • Design Choice: Like DomainRecord, the AutnumRecord includes both structured and unstructured fields, preserving original RDAP/WHOIS responses while enabling consistent graph modeling. Fields are optimized for operational monitoring and attribution while remaining tolerant to registry variability.

The AutnumRecord asset type enables attribution, tracking, and auditing of ASNs across the global routing system, serving as a critical bridge between technical infrastructure and organizational ownership.

AutnumRecord Attributes

Attributes Type Required Description
number integer Autonomous System Number (ASN)
handle string Registry-specific handle (e.g., AS15169)
name string Name of the AS as registered (e.g., GOOGLE)
created_date string (ISO date) Date the ASN was first registered
updated_date string (ISO date) Last modification date of the registration
status array of strings Optional status flags
whois_server string RDAP/WHOIS server that served the registration data
raw string Original registration record text or RDAP JSON

AutnumRecord Properties

Property Type Property Name Description
SimpleProperty last_monitored Timestamp of the last time this record was updated or verified
SourceProperty Source Plugin Name Indicates which data source retrieved the registration

AutnumRecord Outgoing Relations

graph TD
autrec["AutnumRecord"]
whois["FQDN"]
whoisRel@{ shape: braces, label: "whois_server" }
autrec --o whoisRel
whoisRel --> whois

contact["ContactRecord"]
contactrel@{ shape: braces, label: "registrant
admin_contact
abuse_contact
technical_contact" }
autrec --o contactrel
contactrel --> contact

url["URL"]
urlRel@{ shape: braces, label: "rdap_url" }
autrec --o urlRel
urlRel --> url

Relation Type Relation Label Target Assets Description
SimpleRelation whois_server FQDN Links the ASN registration information with the correct WHOIS server
SimpleRelation registrant ContactRecord Links the ASN registration information with registrant contact information
SimpleRelation admin_contact ContactRecord Links the ASN registration information with admin contact information
SimpleRelation abuse_contact ContactRecord Links the ASN registration information with contact information for abuse reporting
SimpleRelation technical_contact ContactRecord Links the ASN registration information with contact information of technical personnel
SimpleRelation rdap_url URL Links the ASN registration information to its associated web page

© 2025 Jeff Foley — Licensed under Apache 2.0.