ASPA (Autonomous System Provider Authorization)
Also known as: autonomous system provider authorization
A signed RPKI object listing an ASN's authorized upstream providers, enabling validation of the AS-path - not just the origin.
ASPA extends RPKI beyond origin validation. In an ASPA object, an AS declares the set of provider ASNs it buys transit from. Validators can then check whether the AS-path of a route is consistent with those declared customer-provider relationships and detect route leaks and path manipulation that ROV alone cannot.
Where a ROA answers 'is this the right origin?', ASPA helps answer 'is this a plausible path?'. It is a newer IETF mechanism and adoption is growing, but together with RPKI it closes much of the gap left by origin-only validation.
Try it