Can the ticket be delegated? A desciption of the resources that are being promised The ticket must be "cashed in" by this date An ABAC RT0 statement, used only for type 'abac'. An ABAC assertion containing a single RT0 statement, used only for type 'abac'. A credential granting privileges or a ticket or making an ABAC assertion. Privileges or a ticket or an ABAC assertion The type of this credential. Currently a Privilege set or a Ticket or ABAC. A serial number. GID of the owner of this credential. URN of the owner. Not everyone can parse DER GID of the target of this credential. URN of the target. UUID of this credential Expires on in ISO8601 format but preferably RFC3339 Optional Extensions Parent that delegated to us