...
With the UDR in place the opposite asymmetric route will be true. A campus system with a public IP, trying to reach the 10 space address of an Azure VM on the public subnet, will fail.
IPv4 Global Address Blocks Owned and Managed by Cornell
...