I finally thought about this after I got off my beer high :-).

Some of our customers complained about losing access to Cloudflare's resources during the Verizon debacle. Since we are doing ROV and dropping Invalids, this should not have happened, given most of Cloudflare's IPv4 and IPv6 routes are ROA'd.

However, since we are not using the ARIN TAL (for known reasons), this explains why this also broke for us.

Back to beer now :-)...

Mark.