When using MD5 authentication in BGP where is the hash passed in the IP packet?

A.
The payload packet of a BGP request and response.

B.
In a TCP header flagged with an option 19.

C.
A specially defined BGP authentication packet.

D.
In a UDP header flagged with an option 16.