Datagroup with address and value

Hi - want to do a check on F5 
when ssl handshake - extract OU from certificate and validate it against client IP .
so i created a data group with address and value 

Question how would i match the pair of ip and ou as address and value

Thanks 

ltm data-group internal ip_allow {
    records {
        10.10.10.0/24 {
            data Prod
        }
        20.20.20.0/24 {
            data Staff
        }
    }
    type ip
}