Technical Summary
This document defines two X.509v3 certificate extensions. The first
extension binds a list of IP address blocks, or prefixes, to the
subject of a certificate. The second extension binds a list of
autonomous system identifiers to the subject of a certificate. These
extensions may be used to convey the authorization of the subject to
use the IP addresses and autonomous system identifiers contained in
the extensions.
Working Group Summary
The PKIX Working Group came to consensus on this document. The
document was also reviewed by the SEND Working Group.
Protocol Quality
This document was reviewed by Russell Housley for the IESG.