diff --git a/data/route/10.100.0.0_14 b/data/route/10.100.0.0_14
index 98adf7ccc..03c820223 100644
--- a/data/route/10.100.0.0_14
+++ b/data/route/10.100.0.0_14
@@ -1,9 +1,10 @@
 route:              10.100.0.0/14
 max-length:         32
 origin:             AS64654
-origin:             AS4242421288
-origin:             AS4242422718
-origin:             AS4242422480
-remarks:            Manual ROA to allow the chaosvpn interconnects to announce anything.
+remarks:            Manual ROA to allow the ChaosVPN interconnect to
+                    announce routes. ChaosVPN uses Tinc which supports
+                    only one gateway to DN42, so there must only be one
+                    origin ASN listed here.
+                    Do not change without mailing list consensus.
 mnt-by:             DN42-MNT
 source:             DN42
diff --git a/data/route/172.31.0.0_16 b/data/route/172.31.0.0_16
index 61c120255..3e573b560 100644
--- a/data/route/172.31.0.0_16
+++ b/data/route/172.31.0.0_16
@@ -1,9 +1,10 @@
 route:              172.31.0.0/16
 max-length:         32
 origin:             AS64654
-origin:             AS4242421288
-origin:             AS4242422718
-origin:             AS4242422480
-remarks:            Manual ROA to allow the chaosvpn interconnects to announce anything.
+remarks:            Manual ROA to allow the ChaosVPN interconnect to
+                    announce routes. ChaosVPN uses Tinc which supports
+                    only one gateway to DN42, so there must only be one
+                    origin ASN listed here.
+                    Do not change without mailing list consensus.
 mnt-by:             DN42-MNT
 source:             DN42