diff --git a/net/axa/Makefile b/net/axa/Makefile
index 6b584ab3f39f..754aa293dd4f 100644
--- a/net/axa/Makefile
+++ b/net/axa/Makefile
@@ -1,68 +1,66 @@
 PORTNAME=	axa
-PORTVERSION=	2.2.2
+PORTVERSION=	3.0.1
 PORTREVISION=	0
 CATEGORIES=	net dns
 MASTER_SITES=	FARSIGHT LOCAL/truckman/farsight
 
 MAINTAINER=	truckman@FreeBSD.org
 COMMENT=	AXA library and tools
 WWW=		https://github.com/farsightsec/axa
 
 LICENSE=	APACHE20 PD
 LICENSE_COMB=	multi
 LICENSE_FILE_APACHE20=	${WRKSRC}/COPYRIGHT
 LICENSE_FILE_PD=	${WRKSRC}/license_pd
 
-BROKEN_aarch64=	alignment error at link time
-
 BUILD_DEPENDS=	bash:shells/bash \
 		sie-nmsg>0:net/sie-nmsg
 LIB_DEPENDS=	liblmdb.so:databases/lmdb \
 		libcheck.so:devel/check \
 		libprotobuf-c.so:devel/protobuf-c \
 		libnmsg.so:net/nmsg \
 		libwdns.so:dns/wdns \
 		libyajl.so:devel/yajl
 RUN_DEPENDS=	sie-nmsg>0:net/sie-nmsg
 
 USES=		autoreconf compiler gmake libedit libtool pathfix \
 		pkgconfig shebangfix ssl
 
 GNU_CONFIGURE=	yes
 CONFIGURE_SHELL=	${LOCALBASE}/bin/bash
 USE_LDCONFIG=	yes
 SHEBANG_FILES=	tools/axa_link_certs.in
 
 PORTDOCS=	*
 
 OPTIONS_DEFINE=	DOCS DOXYGEN
 OPTIONS_DEFAULT=DOXYGEN
 
 ALL_TARGET=	all
 INSTALL_TARGET=	install-strip
 DOXYGEN_BUILD_DEPENDS=	doxygen:devel/doxygen
 DOXYGEN_ALL_TARGET=	html-local
 DOXYGEN_IMPLIES=	DOCS
 
 LDFLAGS+=	-lm
 
 .include <bsd.port.pre.mk>
 
 CONFIGURE_ENV+=	libcrypto_CFLAGS="-I${OPENSSLINC}"	\
 		libcrypto_LIBS="-lcrypto"		\
 		libssl_CFLAGS="-I${OPENSSLINC}"		\
 		libssl_LIBS="-lssl"
 
 post-extract:
 	(${ECHO} "For libmy/b64_encode.c:" ; \
 	${SED} -ne "1,/\*\//p" ${WRKSRC}/libmy/b64_encode.c ) > ${LICENSE_FILE_PD}
 
 .if ${CHOSEN_COMPILER_TYPE} == gcc
 pre-configure:
 	${REINPLACE_CMD} -e 's|-Wno-unused-command-line-argument||' ${WRKSRC}/configure.ac
 .endif
 
 post-install-DOXYGEN-on:
 	(cd ${WRKSRC} && ${COPYTREE_SHARE} html ${STAGEDIR}${DOCSDIR})
 
 .include <bsd.port.post.mk>
diff --git a/net/axa/distinfo b/net/axa/distinfo
index 965c249944d9..7970dea41bb8 100644
--- a/net/axa/distinfo
+++ b/net/axa/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1669005448
-SHA256 (axa-2.2.2.tar.gz) = 7cba4ccf6bae1d972a614b4acb1cf43fb7635bfd9fe777a6831b528f0218bce3
-SIZE (axa-2.2.2.tar.gz) = 584394
+TIMESTAMP = 1682645278
+SHA256 (axa-3.0.1.tar.gz) = 53e10fc17df56385d693fcd6d97cdb070585b499c7c1bb4e4dc411a4ec64f125
+SIZE (axa-3.0.1.tar.gz) = 570207
diff --git a/net/axa/pkg-plist b/net/axa/pkg-plist
index 80827bda08e4..d8d4e28c7a20 100644
--- a/net/axa/pkg-plist
+++ b/net/axa/pkg-plist
@@ -1,40 +1,38 @@
 bin/axa_link_certs
 bin/axa_make_cert
 bin/axa_server_cert
-bin/axa_tsindextool
 bin/radtool
 bin/radtunnel
 bin/sratool
 bin/sratunnel
 %%ETCDIR%%/fields
 include/axa/axa.h
 include/axa/axa_endian.h
 include/axa/bits.h
 include/axa/client.h
 include/axa/client_config.h
 include/axa/dns_walk.h
 include/axa/fields.h
 include/axa/json.h
-include/axa/mdb.h
+include/axa/kickfile.h
 include/axa/strbuf.h
 include/axa/open_nmsg_out.h
 include/axa/protocol.h
 include/axa/socket.h
 include/axa/trie.h
 include/axa/version.h
 include/axa/wire.h
 include/axa/yajl_shortcuts.h
 include/libmy/b64_encode.h
 lib/libaxa.a
 lib/libaxa.so
-lib/libaxa.so.1
-lib/libaxa.so.1.1.1
+lib/libaxa.so.3
+lib/libaxa.so.3.0.0
 libdata/pkgconfig/libaxa.pc
 man/man1/radtool.1.gz
 man/man1/radtunnel.1.gz
 man/man1/sratool.1.gz
 man/man1/sratunnel.1.gz
 man/man8/axa_link_certs.8.gz
 man/man8/axa_make_cert.8.gz
 man/man8/axa_server_cert.8.gz
-man/man8/axa_tsindextool.8.gz