ASPA: making Internet routing more secure

This post introduces ASPA (Autonomous System Provider Authorization) as a new cryptographic standard to enhance BGP security by validating the entire path of network traffic, building upon RPKI. Cloudflare Radar has launched a new feature to monitor ASPA deployment trends. The post details how ASPA works, its validation process, its effectiveness against forged-origin hijacks (with noted limitations), and the ease of creating ASPA objects within RIRs like RIPE and ARIN. This directly contributes to the network's security and reliability by addressing a critical challenge in internet routing.