This counter tracks how many new RSA key pairs this module has generated, counted since the module last became active. RSA key generation is a relatively hardware-intensive operation typically tied to certificate enrollment or key rollover events rather than routine traffic, so a spike here usually correlates with an administrative action like generating a new device certificate rather than ordinary VPN traffic. If an admin recently ran a crypto key generate rsa command on the device, they'd expect this counter to increment by exactly the number of key pairs that command created.