Can someone explain how we know these “announcements” are real? What’s to stop me setting up a company and announcing random dormant address ranges that I don’t own?
rpki[0], but that doesn't mean fake bgp announcements, considered bgp hijacking[1], don't happen[2].
Once every t1 drops invalid prefixes, then rpki will effectively mean no T1 can turn off the internet for other ASNs, but everyone signing their prefixes is required to mean nobody can fake announce an IP.
It looks like the DOD's routes are indeed signed[3].
The HE link doesnt mean they are signed.
It just means the IRR records are correct.
You would see a green key on the prefixes if they were signed (and correct)