This should be just `authorization.authorization`; the `Response#authorization` field should contain everything necessary to run follow-on reference transactions.