AAS Part 2 v3.0.2 section 10.2.5 (p. 87) defined the class SecurityAttributeObject with mandatory properties key and value.
However, no detailed description about what should be the content is given.
I have signed the required Developer Certificate of Origin (DCO) already.