The channel’s callerid is copied and canonicalized to remove the ‘+’ (among other things). The canonicalized value is use to look up the TN in the stir_shaken config and is used in the orig.tn field in the outgoing Identity header. The original un-canonicalized value is still used for the PAI header.
Incoming:
The received callerid from PAI or From, etc. is copied and canonicalized before comparing it to the orig.tn in the received Identity header.
So, Asterisk->Asterisk calls should work even with a ‘+’ prefix in the callerid. HOWEVER… Although Asterisk canonicalizes the value from the incoming PAI header before comparing it to the incoming Identity orig.tn field, other implementations may not. This may result in them marking the call as unverified.