A root public key or certificate explicitly trusted as the starting point for certificate path validation.