The Registration Authority (RA) is responsible for verifying the organisation and the identity of the "Authoriser" of a business entity.
This identity verification process adheres to Level of Assurance 2 of the Gatekeeper PKI Framework, published by the Digital Transformation Office of the Australian Government.
An Authoriser is an individual with the clear authority to commit an organisation and appoint a Certificate Manager (e.g., CEO, Company Director, Sole Trader). The Authoriser also nominates one or more Certificate Managers who are authorised to manage digital certificates on behalf of the organisation; these managers are verified against an approved list, but no further identity checks are required for them.