yes. At the very least, there are the autonomous system registration fees paid to ARIN for the prefix. CloudFlare might just be paying APNIC for the two addresses it needs, though, or in some kind of agreement. Either way, CloudFlare paid in some way to be the sole entity on the internet allowed to advertise for prefixes containing 1.0.0.1 and 1.1.1.1 over BGP to its peers.