The record used to identify the DNSSEC signing key of a delegated zone
http://tools.ietf.org/html/rfc4034