One of two general patterns applicable to trust relationships in a PublicKeyInfrastructure.
Ultimate trust is invested in a CertificateAuthority whose RootCertificates are installed in the software used to implement authentication. Trust then flows from these transitively out to other agencies vouched for by the centralized CertificateAuthority.
Contrast with WebOfTrust, the other trust pattern.