# `BoundedAuthorityProtocol.RoleAttestation.V1.RoleAttestation`
[🔗](https://github.com/baselabs/bounded_authority_protocol/blob/v1.0.0/lib/bounded_authority_protocol/role_attestation/v1/role_attestation.ex#L1)

One producer-side role attestation: an attestor key binding a subject key to a role.

## Fields

* `attestor_key_id` - the attestor key identifier, written to the header `kid`: 1 to `kid_bytes`
  (128) bytes of ASCII letters, digits, `-`, `.`, `_` or `~`.
* `jti` - the attestation identifier: non-empty StringOrURI of at most `identifier_bytes` (512)
  UTF-8 bytes; the audit and revocation-reference handle.
* `key_id` - the subject key identifier: 1 to `kid_bytes` (128) bytes of ASCII letters, digits,
  `-`, `.`, `_` or `~`.
* `public_key` - the subject's raw 32-byte Ed25519 public key; it must pass
  `BoundedAuthorityProtocol.Ed25519.acceptable_public_key?/1`.
* `role` - exactly `"issuer"` or `"holder"`.
* `nbf` - the start of the acceptance window, integer Unix time in seconds.
* `exp` - the exclusive end of the window, integer Unix time in seconds; it must be after `nbf`.

# `t`

```elixir
@type t() :: %BoundedAuthorityProtocol.RoleAttestation.V1.RoleAttestation{
  attestor_key_id: binary(),
  exp: integer(),
  jti: binary(),
  key_id: binary(),
  nbf: integer(),
  public_key: binary(),
  role: binary()
}
```

Producer input for one role attestation.

---

*Consult [api-reference.md](api-reference.md) for complete listing*