The DNSSEC OK (DO) bit: the client understands DNSSEC records.
The upper 8 bits of the extended RCODE (carried in the TTL field).
The EDNS options carried in the rdata.
The advertised UDP payload size (carried in the CLASS field).
The EDNS version (0 for EDNS0).
The decoded semantics of an OPT pseudo-record (RFC 6891).