Authentication Successful
If there’s a matching AS RR and the origin AS matches
- prefix is considered authenticated
- authenticated paths may be preferred over unauthenticated paths
- authentication has a lifetime, min TTL of all RRs
- authentication should be rechecked before lifetime expires