{
  "kms_key": "f9193d31-3fd9-4c95-8fc6-0b4af3172a29",
  "algorithm": "RSAES_OAEP_SHA_256",
  "key_spec": "RSA_4096",
  "region": "eu-north-1",
  "spki_b64": "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",
  "spki_sha256": "7cc8c9b748adf3e8981b72967d44bdcdb7d92c6b7156aefa7bc5178ee68f03d3",
  "decrypt_only_for_pcr0": "3ea0a6f506beac36cb81e6a469df53072f0c38d3599183b15960246c2f89108cf276430233f7f16ac00de1162f5ac343",
  "about": "The public half of the AWS KMS case key, read with GetPublicKey on 2026-10-05. Its private half was made in AWS KMS (origin AWS_KMS) and never leaves it. The key policy lets only the room build with this PCR0 (Room v6) decrypt; everyone else is refused by an explicit deny, our admins included."
}