pub fn detect_rir_from_source(response: &str) -> Vec<&'static str>
Detect RIR from source field - more accurate than content-based detection