>Is there a way for RPs to verify an OP's claim made via PAPE?  I mean, I can write an OP that uses PAPE to say I'm Verisign authorized.  But how can an RP verify that claim?

By using Verisign's public key to decrypt the assertion?

(This assumes that Verisign can keep its private key secure.)

-Shade