org.cispec.oid

recommended: any CI where the owning party has a registered OID arc

org.cispec.oid records the OID arc belonging to the party that owns or is accountable for a Change Item — their IANA Private Enterprise Number or equivalent registered arc. It is a pointer to their own registry tree, not to DPS’s arc or to this specification’s arc.

This term serves two purposes:

Verification: A PEN is independently verifiable against the IANA Private Enterprise Number registry by anyone, without relying on the asserting organisation’s own infrastructure. Pairing org.cispec.oid with org.cispec.organization gives an auditor or assessor a path to verify organisational identity through an independent registry.

Extension namespace: An implementor who needs custom labels beyond the org.cispec.* set can use their own PEN as a namespace root. If Lockheed Martin (iso.org.dod.internet.1.2.840.114002) wants a contractor tracking label, they mint it under their own arc:

org.cispec.oid=1.2.840.114002
net.lmtco.cispec.contractor=HPE

The org.cispec.oid value points at their registered arc; their custom labels live under that arc using their own reverse-DNS prefix. This is how the label set extends without polluting org.cispec.* with organisation-specific terms.

Getting a PEN: IANA issues Private Enterprise Numbers at no cost. Register at https://pen.iana.org/pen/PenApplication.page. A PEN is permanent and tied to your organisation’s legal name. DPS’s PEN is 42387; the full OID arc is iso.org.dod.internet.42387.

Value format

A dot-notation OID string pointing at the owning party’s own registered arc, not at DPS’s 42387 arc.

org.cispec.oid=1.3.6.1.4.1.42387
org.cispec.oid=iso.org.dod.internet.1.2.840.114002

Omit this term if the owning party has no registered arc or if the relationship is not relevant to record. It is not required.

Conformance

org.cispec.oid is RECOMMENDED where the owning party’s OID arc is known and the relationship is meaningful to record. Not REQUIRED for Declared conformance.

Attestation

A PEN is verifiable against the IANA registry by any party. Whether a specific sub-arc value within that PEN is accurate depends on the owning party’s own MIB or registry tree — IANA attests that the PEN belongs to the named organisation, not that any sub-arc value is currently correct.

Resolution and relation

oid points outward at another organisation’s registry, not at other Change Items sharing this label. It does not form a reverse-lookup edge the way owner or organization do.

References

IANA PEN registration
IANA Private Enterprise Number registry
RFC 1065 — Structure and Identification of Management Information for TCP/IP-based Internets

Document identifier

OID: 1.3.6.1.4.1.42387.2.2
GUID: c79d496e-04f0-559c-9e88-63109933cddb