For reference, the path observed by BGPMon was: 11039 The George Washington University 46887 Lightower Fiber Networks I, LLC 6939 Hurricane Electric LLC

For reference, the path observed by BGPMon was: 11039 The George Washington University 46887 Lightower Fiber Networks I, LLC 6939 Hurricane Electric LLC 4134 China Telecom Backbone 4134 China Telecom Backbone 4134 China Telecom Backbone 4812 China Telecom (Group) Hurricane Electric has been known to not apply route filters to large peers, leading to hijacks like this. I suspect that was the case here, too. Although you are right, this path could have been spoofed by GWU or Lightower (or BGPMon!)