# `BoundedAuthorityProtocol.RoleAttestation.V1.AttestationFacts`
[🔗](https://github.com/baselabs/bounded_authority_protocol/blob/v1.0.0/lib/bounded_authority_protocol/role_attestation/v1/attestation_facts.ex#L1)

Closed value-bearing, redacted, non-authorizing verified role-attestation facts.

## Fields

* `version` - always `1`.
* `attestor_key_id` - the verified attestor key identifier.
* `attestor_key_fingerprint` - the raw 32-byte RFC 7638 fingerprint of the attestor key.
* `subject_key_id` - the verified subject key identifier.
* `subject_key_fingerprint` - the raw 32-byte RFC 7638 fingerprint of the subject key.
* `role` - the attested role, `"issuer"` or `"holder"`.
* `jti` - the attestation identifier.
* `nbf` - the start of the window, integer Unix time in seconds.
* `exp` - the exclusive end of the window, integer Unix time in seconds.
* `verification` - always `:signature_and_window`.
* `trust` - always `:not_evaluated`.

# `t`

```elixir
@type t() :: %BoundedAuthorityProtocol.RoleAttestation.V1.AttestationFacts{
  attestor_key_fingerprint: binary(),
  attestor_key_id: binary(),
  exp: integer(),
  jti: binary(),
  nbf: integer(),
  role: binary(),
  subject_key_fingerprint: binary(),
  subject_key_id: binary(),
  trust: :not_evaluated,
  verification: :signature_and_window,
  version: 1
}
```

Facts from a verified role attestation.

---

*Consult [api-reference.md](api-reference.md) for complete listing*