I guess it doesn't have to be the loan number, but a unique identifier for each loan must be used as part of the ULI.
2. Follows the Legal Entity Identifier with up to 23 additional characters to identify the covered loan or application, which:
 May be letters, numerals, or a combination of letters and numerals;
 Must be unique within the financial institution; and
 Must not include any information that could be used to directly identify the applicant or borrower.
_________________________
All opinions are my own, not my employer's