Ultimate trust is invested in a CertificateAuthority whose RootCertificate?s are installed in the software used to implement authentication. Trust then flows from these transitively out to other agencies vouched for by the centralized CertificateAuthority.
Contrast with WebOfTrust, the other trust pattern.