I've had multiple emails from [email protected] going back 6 months or so which were all valid. They definitely do use the crm.ba.com domain.

Not sure what you're actually asking here but if you want confirmation if this is spoofing or not then please share the raw email headers.