it is using the Reverse DNS tree to hang ASN ownership records onto IP address blocks, so you have got a mechanism for validating announcements about ASNs owning those blocks, and that ownership is already hierarchical, which is why there is a concept of legitimate here at all.