registrationStatus

The authenticated device's registration metadata: its current authentication epoch, which a routine rotation statement has to name, and the server time its registered key was installed at. Metadata only: whether a rotation is due is the application's policy (docs/device-authentication-rotation.md), never the server's.