



Secure Patterns for Internet CrEdentials                      M. Prorock
Internet-Draft                                              Tradeverifyd
Intended status: Standards Track                             M. B. Jones
Expires: 23 April 2026                            Self-Issued Consulting
                                                            B. W. Zundel
                                                            Tradeverifyd
                                                         20 October 2025


                          Traceability Claims
             draft-prorock-spice-cwt-traceability-claims-03

Abstract

   This document defines claims to support traceability of physical
   goods across supply chains, focusing on items such as bills of
   lading, transport modes, and container manifests.  These claims
   standardize the encoding of essential logistics and transport
   metadata, facilitating enhanced transparency and accountability in
   global supply chains.  These claims are registered for use in both
   CBOR Web Tokens (CWTs) and JSON Web Tokens (JWTs).

About This Document

   This note is to be removed before publishing as an RFC.

   The latest revision of this draft can be found at
   https://mprorock.github.io/draft-prorock-spice-cwt-traceability-
   claims/draft-prorock-spice-cwt-traceability-claims.html.  Status
   information for this document may be found at
   https://datatracker.ietf.org/doc/draft-prorock-spice-cwt-
   traceability-claims/.

   Discussion of this document takes place on the Secure Patterns for
   Internet CrEdentials Working Group mailing list
   (mailto:spice@ietf.org), which is archived at
   https://mailarchive.ietf.org/arch/browse/spice/.  Subscribe at
   https://www.ietf.org/mailman/listinfo/spice/.

   Source for this draft and an issue tracker can be found at
   https://github.com/mprorock/draft-prorock-spice-cwt-traceability-
   claims.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.




Prorock, et al.           Expires 23 April 2026                 [Page 1]

Internet-Draft             Traceability Claims              October 2025


   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on 23 April 2026.

Copyright Notice

   Copyright (c) 2025 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents (https://trustee.ietf.org/
   license-info) in effect on the date of publication of this document.
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.  Code Components
   extracted from this document must include Revised BSD License text as
   described in Section 4.e of the Trust Legal Provisions and are
   provided without warranty as described in the Revised BSD License.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   4
   2.  Conventions and Definitions . . . . . . . . . . . . . . . . .   4
   3.  Example . . . . . . . . . . . . . . . . . . . . . . . . . . .   5
   4.  Security Considerations . . . . . . . . . . . . . . . . . . .   5
   5.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .   5
     5.1.  CBOR Web Token (CWT) Claims . . . . . . . . . . . . . . .   5
       5.1.1.  Goods Identifier  . . . . . . . . . . . . . . . . . .   5
       5.1.2.  Shipment ID . . . . . . . . . . . . . . . . . . . . .   6
       5.1.3.  Bill of Lading Number . . . . . . . . . . . . . . . .   6
       5.1.4.  Transport Mode  . . . . . . . . . . . . . . . . . . .   6
       5.1.5.  Container ID  . . . . . . . . . . . . . . . . . . . .   7
       5.1.6.  Origin Location . . . . . . . . . . . . . . . . . . .   7
       5.1.7.  Destination Location  . . . . . . . . . . . . . . . .   8
       5.1.8.  Carrier ID  . . . . . . . . . . . . . . . . . . . . .   8
       5.1.9.  Estimated Delivery Date . . . . . . . . . . . . . . .   8
       5.1.10. Customs Declaration Number  . . . . . . . . . . . . .   9
       5.1.11. Commodity Description . . . . . . . . . . . . . . . .   9
       5.1.12. HS Code . . . . . . . . . . . . . . . . . . . . . . .   9
       5.1.13. Gross Weight  . . . . . . . . . . . . . . . . . . . .  10
       5.1.14. Temperature Min Requirement . . . . . . . . . . . . .  10



Prorock, et al.           Expires 23 April 2026                 [Page 2]

Internet-Draft             Traceability Claims              October 2025


       5.1.15. Temperature Max Requirement . . . . . . . . . . . . .  10
       5.1.16. Last Known Location . . . . . . . . . . . . . . . . .  11
       5.1.17. Tariff Code . . . . . . . . . . . . . . . . . . . . .  11
       5.1.18. Country of Origin . . . . . . . . . . . . . . . . . .  11
       5.1.19. Customs Value . . . . . . . . . . . . . . . . . . . .  12
       5.1.20. Currency Code . . . . . . . . . . . . . . . . . . . .  12
       5.1.21. Import/Export License Number  . . . . . . . . . . . .  12
       5.1.22. Sanctions Reference . . . . . . . . . . . . . . . . .  13
       5.1.23. Legal Jurisdictions . . . . . . . . . . . . . . . . .  13
       5.1.24. Importer Code . . . . . . . . . . . . . . . . . . . .  14
       5.1.25. Exporter Code . . . . . . . . . . . . . . . . . . . .  14
       5.1.26. International Commercial Terms  . . . . . . . . . . .  14
       5.1.27. Regulatory Compliance Codes . . . . . . . . . . . . .  15
       5.1.28. Additional Documents Required . . . . . . . . . . . .  15
       5.1.29. Freight Charges . . . . . . . . . . . . . . . . . . .  15
       5.1.30. Insurance Charges . . . . . . . . . . . . . . . . . .  16
       5.1.31. Packing Costs . . . . . . . . . . . . . . . . . . . .  16
       5.1.32. Place of Loading  . . . . . . . . . . . . . . . . . .  16
       5.1.33. Place of Discharge  . . . . . . . . . . . . . . . . .  17
       5.1.34. Consignee Information . . . . . . . . . . . . . . . .  17
       5.1.35. Consignor Information . . . . . . . . . . . . . . . .  18
       5.1.36. Customs Declaration Date  . . . . . . . . . . . . . .  18
     5.2.  JSON Web Token (JWT) Claims . . . . . . . . . . . . . . .  18
       5.2.1.  Goods Identifier  . . . . . . . . . . . . . . . . . .  18
       5.2.2.  Shipment ID . . . . . . . . . . . . . . . . . . . . .  19
       5.2.3.  Bill of Lading Number . . . . . . . . . . . . . . . .  19
       5.2.4.  Transport Mode  . . . . . . . . . . . . . . . . . . .  19
       5.2.5.  Container ID  . . . . . . . . . . . . . . . . . . . .  19
       5.2.6.  Origin Location . . . . . . . . . . . . . . . . . . .  20
       5.2.7.  Destination Location  . . . . . . . . . . . . . . . .  20
       5.2.8.  Carrier ID  . . . . . . . . . . . . . . . . . . . . .  20
       5.2.9.  Estimated Delivery Date . . . . . . . . . . . . . . .  20
       5.2.10. Customs Declaration Number  . . . . . . . . . . . . .  20
       5.2.11. Commodity Description . . . . . . . . . . . . . . . .  21
       5.2.12. HS Code . . . . . . . . . . . . . . . . . . . . . . .  21
       5.2.13. Gross Weight  . . . . . . . . . . . . . . . . . . . .  21
       5.2.14. Temperature Min Requirement . . . . . . . . . . . . .  21
       5.2.15. Temperature Max Requirement . . . . . . . . . . . . .  22
       5.2.16. Last Known Location . . . . . . . . . . . . . . . . .  22
       5.2.17. Tariff Code . . . . . . . . . . . . . . . . . . . . .  22
       5.2.18. Country of Origin . . . . . . . . . . . . . . . . . .  22
       5.2.19. Customs Value . . . . . . . . . . . . . . . . . . . .  23
       5.2.20. Currency Code . . . . . . . . . . . . . . . . . . . .  23
       5.2.21. Import/Export License Number  . . . . . . . . . . . .  23
       5.2.22. Sanctions Reference . . . . . . . . . . . . . . . . .  23
       5.2.23. Legal Jurisdiction  . . . . . . . . . . . . . . . . .  24
       5.2.24. Importer Code . . . . . . . . . . . . . . . . . . . .  24
       5.2.25. Exporter Code . . . . . . . . . . . . . . . . . . . .  24



Prorock, et al.           Expires 23 April 2026                 [Page 3]

Internet-Draft             Traceability Claims              October 2025


       5.2.26. International Commercial Terms  . . . . . . . . . . .  24
       5.2.27. Regulatory Compliance Codes . . . . . . . . . . . . .  24
       5.2.28. Additional Documents Required . . . . . . . . . . . .  25
       5.2.29. Freight Charges . . . . . . . . . . . . . . . . . . .  25
       5.2.30. Insurance Charges . . . . . . . . . . . . . . . . . .  25
       5.2.31. Packing Costs . . . . . . . . . . . . . . . . . . . .  25
       5.2.32. Place of Loading  . . . . . . . . . . . . . . . . . .  26
       5.2.33. Place of Discharge  . . . . . . . . . . . . . . . . .  26
       5.2.34. Consignee Information . . . . . . . . . . . . . . . .  26
       5.2.35. Consignor Information . . . . . . . . . . . . . . . .  26
       5.2.36. Customs Declaration Date  . . . . . . . . . . . . . .  27
   6.  References  . . . . . . . . . . . . . . . . . . . . . . . . .  27
     6.1.  Normative References  . . . . . . . . . . . . . . . . . .  27
     6.2.  Informative References  . . . . . . . . . . . . . . . . .  27
   Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . .  28
   Document History  . . . . . . . . . . . . . . . . . . . . . . . .  29
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  30

1.  Introduction

   This document defines a set of claims intended to enable the
   traceability of physical goods across various stages of
   transportation and storage.  These claims capture critical
   information necessary for documenting the movement of goods in supply
   chains, thereby supporting regulatory compliance and operational
   efficiency.  These claims are defined for both CBOR Web Tokens (CWTs)
   [RFC8392] and JSON Web Tokens (JWTs) [RFC7519].

   These claims are informed by the following documents, among others:
   ACE Automated Broker Interface (ABI) CBP and Trade Automated
   Interface Requirements (CATAIR) [CATAIR], Integrated Track and Trace
   for Multi-Modal Transportation [TrackTrace], and Traceability
   Vocabulary v1.0: A vocabulary for traceability in supply chains
   [TraceabilityVocab].

   Some claims below utilize GLUE Identifiers [GLUE].

2.  Conventions and Definitions

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
   "OPTIONAL" in this document are to be interpreted as described in
   BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all
   capitals, as shown here.







Prorock, et al.           Expires 23 April 2026                 [Page 4]

Internet-Draft             Traceability Claims              October 2025


3.  Example

   Product Information Example JWT Claims Set:

   {
     "commodity_description": "Organic Blueberries, 12 oz containers",
     "product_id": "nb-blueberries-001",
     "country_of_origin": "CA",
     "hs_code": "0810.40.0026",
     "gross_weight": 5050,
     "min_temperature": 1,
     "max_temperature": 3.5,
     "customs_value": 83335,
     "currency_code": "USD",
     "legal_jurisdictions": ["US", "CA"],
     "regulatory_compliance_codes": [
       "USCOEA",
       "CFIA-PhytoCert",
       "FDA-FSVP-Compliant"
     ]
   }

4.  Security Considerations

   These claims are designed to enhance transparency in supply chain
   tracking but should be handled securely to prevent unauthorized
   access to sensitive data.  Confidentiality and integrity of these
   claims must be considered, particularly when shared across untrusted
   or unsecured networks.  Use of selective disclosure techniques and
   careful consideration of data minimization requirements SHOULD be
   considered when using these claims.

5.  IANA Considerations

5.1.  CBOR Web Token (CWT) Claims

   This specification registers the following claims in the IANA "CBOR
   Web Token (CWT) Claims" registry [IANA.CWT] established by [RFC8392].
   The claim keys are listed as TBD.  We request values in the 256 to
   65535 range.

5.1.1.  Goods Identifier

   *  Claim Name: product_id

   *  Claim Description: A unique identifier for the physical product(s)
      or shipment being tracked.  May correspond to SKU, product ID, or
      batch number.



Prorock, et al.           Expires 23 April 2026                 [Page 5]

Internet-Draft             Traceability Claims              October 2025


   *  JWT Claim Name: product_id

   *  Claim Key: TBD1

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.1 of this specification

5.1.2.  Shipment ID

   *  Claim Name: shipment_id

   *  Claim Description: Unique identifier assigned to a specific
      shipment.

   *  JWT Claim Name: shipment_id

   *  Claim Key: TBD2

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.2 of this specification

5.1.3.  Bill of Lading Number

   *  Claim Name: bill_of_lading_number

   *  Claim Description: Identifier for the bill of lading associated
      with the goods.

   *  JWT Claim Name: bill_of_lading_number

   *  Claim Key: TBD3

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.3 of this specification

5.1.4.  Transport Mode

   *  Claim Name: transport_mode




Prorock, et al.           Expires 23 April 2026                 [Page 6]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Description: Mode of transport used for the shipment.
      (Recommended values: "air", "sea", "rail", "truck").

   *  JWT Claim Name: transport_mode

   *  Claim Key: TBD4

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.4 of this specification

5.1.5.  Container ID

   *  Claim Name: container_id

   *  Claim Description: Unique identifier for the container used in the
      shipment.

   *  JWT Claim Name: container_id

   *  Claim Key: TBD5

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.5 of this specification

5.1.6.  Origin Location

   *  Claim Name: origin_location

   *  Claim Description: Geographical origin of the goods, represented
      as an [ISO.3166] alpha-2 country code string or specific address.

   *  JWT Claim Name: origin_location

   *  Claim Key: TBD6

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.6 of this specification





Prorock, et al.           Expires 23 April 2026                 [Page 7]

Internet-Draft             Traceability Claims              October 2025


5.1.7.  Destination Location

   *  Claim Name: destination_location

   *  Claim Description: Final destination of the goods in the shipment.

   *  JWT Claim Name: destination_location

   *  Claim Key: TBD7

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.7 of this specification

5.1.8.  Carrier ID

   *  Claim Name: carrier_id

   *  Claim Description: Identifier for the carrier or logistics
      provider responsible for the shipment.

   *  JWT Claim Name: carrier_id

   *  Claim Key: TBD8

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.8 of this specification

5.1.9.  Estimated Delivery Date

   *  Claim Name: estimated_delivery_date

   *  Claim Description: Expected delivery date for the shipment,
      represented as an [ISO.8601] date and time string.

   *  JWT Claim Name: estimated_delivery_date

   *  Claim Key: TBD9

   *  Claim Value Type: text string

   *  Change Controller: IETF




Prorock, et al.           Expires 23 April 2026                 [Page 8]

Internet-Draft             Traceability Claims              October 2025


   *  Reference: Section 5.1.9 of this specification

5.1.10.  Customs Declaration Number

   *  Claim Name: customs_declaration_number

   *  Claim Description: Identifier for the customs declaration
      associated with the shipment.

   *  JWT Claim Name: customs_declaration_number

   *  Claim Key: TBD10

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.10 of this specification

5.1.11.  Commodity Description

   *  Claim Name: commodity_description

   *  Claim Description: Description of the commodity or goods being
      transported.

   *  JWT Claim Name: commodity_description

   *  Claim Key: TBD11

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.11 of this specification

5.1.12.  HS Code

   *  Claim Name: hs_code

   *  Claim Description: Harmonized System (HS) code [HSCode] for the
      goods.

   *  JWT Claim Name: hs_code

   *  Claim Key: TBD12

   *  Claim Value Type: text string



Prorock, et al.           Expires 23 April 2026                 [Page 9]

Internet-Draft             Traceability Claims              October 2025


   *  Change Controller: IETF

   *  Reference: Section 5.1.12 of this specification

5.1.13.  Gross Weight

   *  Claim Name: gross_weight

   *  Claim Description: Gross weight of the shipment, in kilograms.

   *  JWT Claim Name: gross_weight

   *  Claim Key: TBD13

   *  Claim Value Type: integer or floating point number

   *  Change Controller: IETF

   *  Reference: Section 5.1.13 of this specification

5.1.14.  Temperature Min Requirement

   *  Claim Name: temperature_requirement_min

   *  Claim Description: Minimum temperature (in Celsius) required for
      transport or storage of the goods.

   *  JWT Claim Name: temperature_requirement_min

   *  Claim Key: TBD14

   *  Claim Value Type: integer or floating point number

   *  Change Controller: IETF

   *  Reference: Section 5.1.14 of this specification

5.1.15.  Temperature Max Requirement

   *  Claim Name: temperature_requirement_max

   *  Claim Description: Maximum temperature (in Celsius) required for
      transport or storage of the goods.

   *  JWT Claim Name: temperature_requirement_max

   *  Claim Key: TBD15




Prorock, et al.           Expires 23 April 2026                [Page 10]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Value Type: integer or floating point number

   *  Change Controller: IETF

   *  Reference: Section 5.1.15 of this specification

5.1.16.  Last Known Location

   *  Claim Name: last_known_location

   *  Claim Description: Most recent location update for the goods.

   *  JWT Claim Name: last_known_location

   *  Claim Key: TBD16

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.16 of this specification

5.1.17.  Tariff Code

   *  Claim Name: tariff_code

   *  Claim Description: Tariff code applicable to the goods, including
      national tariff classifications or specific duty codes.

   *  JWT Claim Name: tariff_code

   *  Claim Key: TBD17

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.17 of this specification

5.1.18.  Country of Origin

   *  Claim Name: country_of_origin

   *  Claim Description: The country where the goods were produced or
      manufactured, represented as an [ISO.3166] alpha-2 country code
      string.

   *  JWT Claim Name: country_of_origin



Prorock, et al.           Expires 23 April 2026                [Page 11]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Key: TBD18

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.18 of this specification

5.1.19.  Customs Value

   *  Claim Name: customs_value

   *  Claim Description: Declared value of the goods for customs
      purposes, in the currency desginated by the currency code.

   *  JWT Claim Name: customs_value

   *  Claim Key: TBD19

   *  Claim Value Type: integer or floating point number

   *  Change Controller: IETF

   *  Reference: Section 5.1.19 of this specification

5.1.20.  Currency Code

   *  Claim Name: currency_code

   *  Claim Description: Currency code for the customs value and other
      monetary amounts, represented as an [ISO.4217] alpha-3 currency
      code string.

   *  JWT Claim Name: currency_code

   *  Claim Key: TBD20

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.20 of this specification

5.1.21.  Import/Export License Number

   *  Claim Name: license_number





Prorock, et al.           Expires 23 April 2026                [Page 12]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Description: License or permit number required for the
      import or export of the goods.

   *  JWT Claim Name: license_number

   *  Claim Key: TBD21

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.21 of this specification

5.1.22.  Sanctions Reference

   *  Claim Name: sanctions_reference

   *  Claim Description: Reference to applicable sanctions lists or
      regulations affecting the goods or involved parties.

   *  JWT Claim Name: sanctions_reference

   *  Claim Key: TBD22

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.22 of this specification

5.1.23.  Legal Jurisdictions

   *  Claim Name: legal_jurisdictions

   *  Claim Description: Legal jurisdiction(s) governing the
      transaction, represented as an [ISO.3166] alpha-2 country code
      string or other specific legal identifier.

   *  JWT Claim Name: legal_jurisdictions

   *  Claim Key: TBD23

   *  Claim Value Type: array of text strings

   *  Change Controller: IETF

   *  Reference: Section 5.1.23 of this specification




Prorock, et al.           Expires 23 April 2026                [Page 13]

Internet-Draft             Traceability Claims              October 2025


5.1.24.  Importer Code

   *  Claim Name: importer_code

   *  Claim Description: Code identifying the importer.

   *  JWT Claim Name: importer_code

   *  Claim Key: TBD24

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.24 of this specification

5.1.25.  Exporter Code

   *  Claim Name: exporter_code

   *  Claim Description: Code identifying the exporter.

   *  JWT Claim Name: exporter_code

   *  Claim Key: TBD25

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.25 of this specification

5.1.26.  International Commercial Terms

   *  Claim Name: incoterms

   *  Claim Description: International commercial terms [INCOTERMS]
      defining responsibilities between buyer and seller, e.g., "FOB",
      "CIF".

   *  JWT Claim Name: incoterms

   *  Claim Key: TBD26

   *  Claim Value Type: text string

   *  Change Controller: IETF




Prorock, et al.           Expires 23 April 2026                [Page 14]

Internet-Draft             Traceability Claims              October 2025


   *  Reference: Section 5.1.26 of this specification

5.1.27.  Regulatory Compliance Codes

   *  Claim Name: regulatory_compliance_codes

   *  Claim Description: Codes indicating compliance with specific
      regulations or standards (e.g., safety certifications,
      environmental standards).

   *  JWT Claim Name: regulatory_compliance_codes

   *  Claim Key: TBD27

   *  Claim Value Type: array of text strings

   *  Change Controller: IETF

   *  Reference: Section 5.1.27 of this specification

5.1.28.  Additional Documents Required

   *  Claim Name: additional_documents_required

   *  Claim Description: List of additional documents required for
      customs clearance, such as certificates of origin or inspection
      reports.

   *  JWT Claim Name: additional_documents_required

   *  Claim Key: TBD28

   *  Claim Value Type: array of text strings

   *  Change Controller: IETF

   *  Reference: Section 5.1.28 of this specification

5.1.29.  Freight Charges

   *  Claim Name: freight_charges

   *  Claim Description: Transportation costs associated with the
      shipment, in the currency desginated by the currency code.  Used
      for customs valuation.

   *  JWT Claim Name: freight_charges




Prorock, et al.           Expires 23 April 2026                [Page 15]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Key: TBD29

   *  Claim Value Type: integer or floating point number

   *  Change Controller: IETF

   *  Reference: Section 5.1.29 of this specification

5.1.30.  Insurance Charges

   *  Claim Name: insurance_charges

   *  Claim Description: Insurance costs for the shipment, in the
      currency desginated by the currency code.  Used in determining
      customs value.

   *  JWT Claim Name: insurance_charges

   *  Claim Key: TBD30

   *  Claim Value Type: integer or floating point number

   *  Change Controller: IETF

   *  Reference: Section 5.1.30 of this specification

5.1.31.  Packing Costs

   *  Claim Name: packing_costs

   *  Claim Description: Costs associated with packing the goods, in the
      currency desginated by the currency code.  Used in determining
      customs value.

   *  JWT Claim Name: packing_costs

   *  Claim Key: TBD31

   *  Claim Value Type: integer or floating point number

   *  Change Controller: IETF

   *  Reference: Section 5.1.31 of this specification

5.1.32.  Place of Loading

   *  Claim Name: place_of_loading




Prorock, et al.           Expires 23 April 2026                [Page 16]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Description: Location where the goods were loaded for
      shipment, often a port or warehouse.

   *  JWT Claim Name: place_of_loading

   *  Claim Key: TBD32

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.32 of this specification

5.1.33.  Place of Discharge

   *  Claim Name: place_of_discharge

   *  Claim Description: Location where the goods are scheduled to be
      unloaded.

   *  JWT Claim Name: place_of_discharge

   *  Claim Key: TBD33

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.33 of this specification

5.1.34.  Consignee Information

   *  Claim Name: consignee_information

   *  Claim Description: Information about the consignee, including
      identifier, name, address, and contact details.

   *  JWT Claim Name: consignee_information

   *  Claim Key: TBD34

   *  Claim Value Type: map

   *  Change Controller: IETF

   *  Reference: Section 5.1.34 of this specification





Prorock, et al.           Expires 23 April 2026                [Page 17]

Internet-Draft             Traceability Claims              October 2025


5.1.35.  Consignor Information

   *  Claim Name: consignor_information

   *  Claim Description: Information about the consignor, including
      identifier, name, address, and contact details.

   *  JWT Claim Name: consignor_information

   *  Claim Key: TBD35

   *  Claim Value Type: map

   *  Change Controller: IETF

   *  Reference: Section 5.1.35 of this specification

5.1.36.  Customs Declaration Date

   *  Claim Name: customs_declaration_date

   *  Claim Description: Date when the customs declaration was made,
      represented as an [ISO.8601] date and time string.

   *  JWT Claim Name: customs_declaration_date

   *  Claim Key: TBD36

   *  Claim Value Type: text string

   *  Change Controller: IETF

   *  Reference: Section 5.1.36 of this specification

5.2.  JSON Web Token (JWT) Claims

   This specification registers the following claims in the IANA "JSON
   Web Token Claims" registry [IANA.JWT] established by [RFC7519].

5.2.1.  Goods Identifier

   *  Claim Name: product_id

   *  Claim Description: A unique identifier for the physical product(s)
      or shipment being tracked.  May correspond to SKU, product ID, or
      batch number.

   *  Change Controller: IETF



Prorock, et al.           Expires 23 April 2026                [Page 18]

Internet-Draft             Traceability Claims              October 2025


   *  Reference: Section 5.1.1 of this specification

5.2.2.  Shipment ID

   *  Claim Name: shipment_id

   *  Claim Description: Unique identifier assigned to a specific
      shipment.

   *  Change Controller: IETF

   *  Reference: Section 5.1.2 of this specification

5.2.3.  Bill of Lading Number

   *  Claim Name: bill_of_lading_number

   *  Claim Description: Identifier for the bill of lading associated
      with the goods.

   *  Change Controller: IETF

   *  Reference: Section 5.1.3 of this specification

5.2.4.  Transport Mode

   *  Claim Name: transport_mode

   *  Claim Description: Mode of transport used for the shipment.
      (Recommended values: "air", "sea", "rail", "truck")

   *  Change Controller: IETF

   *  Reference: Section 5.1.4 of this specification

5.2.5.  Container ID

   *  Claim Name: container_id

   *  Claim Description: Unique identifier for the container used in the
      shipment.

   *  Change Controller: IETF

   *  Reference: Section 5.1.5 of this specification






Prorock, et al.           Expires 23 April 2026                [Page 19]

Internet-Draft             Traceability Claims              October 2025


5.2.6.  Origin Location

   *  Claim Name: origin_location

   *  Claim Description: Geographical origin of the goods, represented
      as an [ISO.3166] alpha-2 country code string or specific address

   *  Change Controller: IETF

   *  Reference: Section 5.1.6 of this specification

5.2.7.  Destination Location

   *  Claim Name: destination_location

   *  Claim Description: Final destination of the goods in the shipment.

   *  Change Controller: IETF

   *  Reference: Section 5.1.7 of this specification

5.2.8.  Carrier ID

   *  Claim Name: carrier_id

   *  Claim Description: Identifier for the carrier or logistics
      provider responsible for the shipment.

   *  Change Controller: IETF

   *  Reference: Section 5.1.8 of this specification

5.2.9.  Estimated Delivery Date

   *  Claim Name: estimated_delivery_date

   *  Claim Description: Expected delivery date for the shipment,
      represented as an [ISO.8601] date and time string

   *  Change Controller: IETF

   *  Reference: Section 5.1.9 of this specification

5.2.10.  Customs Declaration Number

   *  Claim Name: customs_declaration_number





Prorock, et al.           Expires 23 April 2026                [Page 20]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Description: Identifier for the customs declaration
      associated with the shipment.

   *  Change Controller: IETF

   *  Reference: Section 5.1.10 of this specification

5.2.11.  Commodity Description

   *  Claim Name: commodity_description

   *  Claim Description: Description of the commodity or goods being
      transported.

   *  Change Controller: IETF

   *  Reference: Section 5.1.11 of this specification

5.2.12.  HS Code

   *  Claim Name: hs_code

   *  Claim Description: Harmonized System (HS) code [HSCode] for the
      goods.

   *  Change Controller: IETF

   *  Reference: Section 5.1.12 of this specification

5.2.13.  Gross Weight

   *  Claim Name: gross_weight

   *  Claim Description: Gross weight of the shipment, in kilograms.

   *  Change Controller: IETF

   *  Reference: Section 5.1.13 of this specification

5.2.14.  Temperature Min Requirement

   *  Claim Name: temperature_requirement_min

   *  Claim Description: Minimum temperature (in Celsius) required for
      transport or storage of the goods.

   *  Change Controller: IETF




Prorock, et al.           Expires 23 April 2026                [Page 21]

Internet-Draft             Traceability Claims              October 2025


   *  Reference: Section 5.1.14 of this specification

5.2.15.  Temperature Max Requirement

   *  Claim Name: temperature_requirement_max

   *  Claim Description: Maximum temperature (in Celsius) required for
      transport or storage of the goods.

   *  Change Controller: IETF

   *  Reference: Section 5.1.15 of this specification

5.2.16.  Last Known Location

   *  Claim Name: last_known_location

   *  Claim Description: Most recent location update for the goods.

   *  Change Controller: IETF

   *  Reference: Section 5.1.16 of this specification

5.2.17.  Tariff Code

   *  Claim Name: tariff_code

   *  Claim Description: Tariff code applicable to the goods, including
      national tariff classifications or specific duty codes.

   *  Change Controller: IETF

   *  Reference: Section 5.1.17 of this specification

5.2.18.  Country of Origin

   *  Claim Name: country_of_origin

   *  Claim Description: The country where the goods were produced or
      manufactured, represented as an [ISO.3166] alpha-2 country code
      string

   *  Change Controller: IETF

   *  Reference: Section 5.1.18 of this specification






Prorock, et al.           Expires 23 April 2026                [Page 22]

Internet-Draft             Traceability Claims              October 2025


5.2.19.  Customs Value

   *  Claim Name: customs_value

   *  Claim Description: Declared value of the goods for customs
      purposes, typically in the transaction currency.

   *  Change Controller: IETF

   *  Reference: Section 5.1.19 of this specification

5.2.20.  Currency Code

   *  Claim Name: currency_code

   *  Claim Description: Currency code for the customs value and other
      monetary amounts, represented as an [ISO.4217] alpha-3 currency
      code string

   *  Change Controller: IETF

   *  Reference: Section 5.1.20 of this specification

5.2.21.  Import/Export License Number

   *  Claim Name: license_number

   *  Claim Description: License or permit number required for the
      import or export of the goods.

   *  Change Controller: IETF

   *  Reference: Section 5.1.21 of this specification

5.2.22.  Sanctions Reference

   *  Claim Name: sanctions_reference

   *  Claim Description: Reference to applicable sanctions lists or
      regulations affecting the goods or involved parties.

   *  Change Controller: IETF

   *  Reference: Section 5.1.22 of this specification







Prorock, et al.           Expires 23 April 2026                [Page 23]

Internet-Draft             Traceability Claims              October 2025


5.2.23.  Legal Jurisdiction

   *  Claim Name: legal_jurisdictions

   *  Claim Description: Legal jurisdiction(s) governing the
      transaction, represented as an [ISO.3166] alpha-2 country code
      string or other specific legal identifier.

   *  Change Controller: IETF

   *  Reference: Section 5.1.23 of this specification

5.2.24.  Importer Code

   *  Claim Name: importer_code

   *  Claim Description: Code identifying the importer.

   *  Change Controller: IETF

   *  Reference: Section 5.1.24 of this specification

5.2.25.  Exporter Code

   *  Claim Name: exporter_code

   *  Claim Description: Code identifying the exporter.

   *  Change Controller: IETF

   *  Reference: Section 5.1.25 of this specification

5.2.26.  International Commercial Terms

   *  Claim Name: incoterms

   *  Claim Description: International commercial terms [INCOTERMS]
      defining responsibilities between buyer and seller, e.g., "FOB",
      "CIF".

   *  Change Controller: IETF

   *  Reference: Section 5.1.26 of this specification

5.2.27.  Regulatory Compliance Codes

   *  Claim Name: regulatory_compliance_codes




Prorock, et al.           Expires 23 April 2026                [Page 24]

Internet-Draft             Traceability Claims              October 2025


   *  Claim Description: Codes indicating compliance with specific
      regulations or standards (e.g., safety certifications,
      environmental standards).

   *  Change Controller: IETF

   *  Reference: Section 5.1.27 of this specification

5.2.28.  Additional Documents Required

   *  Claim Name: additional_documents_required

   *  Claim Description: List of additional documents required for
      customs clearance, such as certificates of origin or inspection
      reports.

   *  Change Controller: IETF

   *  Reference: Section 5.1.28 of this specification

5.2.29.  Freight Charges

   *  Claim Name: freight_charges

   *  Claim Description: Transportation costs associated with the
      shipment, used for customs valuation.

   *  Change Controller: IETF

   *  Reference: Section 5.1.29 of this specification

5.2.30.  Insurance Charges

   *  Claim Name: insurance_charges

   *  Claim Description: Insurance costs for the shipment, used in
      determining customs value.

   *  Change Controller: IETF

   *  Reference: Section 5.1.30 of this specification

5.2.31.  Packing Costs

   *  Claim Name: packing_costs

   *  Claim Description: Costs associated with packing the goods,
      relevant for customs valuation.



Prorock, et al.           Expires 23 April 2026                [Page 25]

Internet-Draft             Traceability Claims              October 2025


   *  Change Controller: IETF

   *  Reference: Section 5.1.31 of this specification

5.2.32.  Place of Loading

   *  Claim Name: place_of_loading

   *  Claim Description: Location where the goods were loaded for
      shipment, often a port or warehouse.

   *  Change Controller: IETF

   *  Reference: Section 5.1.32 of this specification

5.2.33.  Place of Discharge

   *  Claim Name: place_of_discharge

   *  Claim Description: Location where the goods are scheduled to be
      unloaded.

   *  Change Controller: IETF

   *  Reference: Section 5.1.33 of this specification

5.2.34.  Consignee Information

   *  Claim Name: consignee_information

   *  Claim Description: Information about the consignee, including
      identifier, name, address, and contact details.

   *  Change Controller: IETF

   *  Reference: Section 5.1.34 of this specification

5.2.35.  Consignor Information

   *  Claim Name: consignor_information

   *  Claim Description: Information about the consignor, including
      identifier, name, address, and contact details.

   *  Change Controller: IETF

   *  Reference: Section 5.1.35 of this specification




Prorock, et al.           Expires 23 April 2026                [Page 26]

Internet-Draft             Traceability Claims              October 2025


5.2.36.  Customs Declaration Date

   *  Claim Name: customs_declaration_date

   *  Claim Description: Date when the customs declaration was made,
      represented as an [ISO.8601] date and time string

   *  Change Controller: IETF

   *  Reference: Section 5.1.36 of this specification

6.  References

6.1.  Normative References

   [ISO.3166] ISO, "ISO 3166-1:2020: Codes for the representation of
              names of countries and their subdivisions", 2020,
              <https://www.iso.org/standard/72482.html>.

   [ISO.4217] ISO, "ISO 4217:2015: Codes for the representation of
              currencies", 2015,
              <https://www.iso.org/standard/64758.html>.

   [ISO.8601] ISO, "ISO 8601-1:2019: Date and time — Representations for
              information interchange", 2019,
              <https://www.iso.org/standard/70907.html>.

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119,
              DOI 10.17487/RFC2119, March 1997,
              <https://www.rfc-editor.org/rfc/rfc2119>.

   [RFC7519]  Jones, M., Bradley, J., and N. Sakimura, "JSON Web Token
              (JWT)", RFC 7519, DOI 10.17487/RFC7519, May 2015,
              <https://www.rfc-editor.org/rfc/rfc7519>.

   [RFC8174]  Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
              2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
              May 2017, <https://www.rfc-editor.org/rfc/rfc8174>.

   [RFC8392]  Jones, M., Wahlstroem, E., Erdtman, S., and H. Tschofenig,
              "CBOR Web Token (CWT)", RFC 8392, DOI 10.17487/RFC8392,
              May 2018, <https://www.rfc-editor.org/rfc/rfc8392>.

6.2.  Informative References






Prorock, et al.           Expires 23 April 2026                [Page 27]

Internet-Draft             Traceability Claims              October 2025


   [CATAIR]   U.S. Customs and Border Protection, "ACE Automated Broker
              Interface (ABI) CBP and Trade Automated Interface
              Requirements (CATAIR)", April 2025,
              <https://www.cbp.gov/trade/ace/catair>.

   [GLUE]     Zundel, B., Dingle, P., and M. B. Jones, "GLobal Unique
              Enterprise (GLUE) Identifiers", April 2025,
              <https://datatracker.ietf.org/doc/draft-ietf-spice-glue-
              id/>.

   [HSCodes]  World Customs Organization, "Harmonized System (HS)
              Nomenclature 2022 Edition", January 2022,
              <https://www.wcoomd.org/en/topics/nomenclature/instrument-
              and-tools/hs-nomenclature-2022-edition/hs-nomenclature-
              2022-edition.aspx>.

   [IANA.CWT] IANA, "CBOR Web Token (CWT) Claims", n.d.,
              <https://www.iana.org/assignments/cwt/>.

   [IANA.JWT] IANA, "JSON Web Token Claims", n.d.,
              <https://www.iana.org/assignments/jwt/>.

   [INCOTERMS]
              International Chamber of Commerce, "Incoterms 2020", 2019,
              <https://iccwbo.org/business-solutions/incoterms-rules/
              incoterms-2020/>.

   [TraceabilityVocab]
              Jespersen, N., Alkhraishi, M., and B. Zundel,
              "Traceability Vocabulary v1.0: A vocabulary for
              traceability in supply chains", December 2024,
              <https://w3c-ccg.github.io/traceability-vocab/>.

   [TrackTrace]
              United Nations Centre for Trade Facilitation and
              Electronic Business (UN/CEFACT), "Integrated Track and
              Trace for Multi-Modal Transportation", September 2022,
              <https://unece.org/sites/default/files/2025-01/BRS-
              IntegratedTrackandTraceforMulti-
              ModalTransportationv0.1-Final.pdf>.

Acknowledgments

   A.J.  Stein contributed to this specification.







Prorock, et al.           Expires 23 April 2026                [Page 28]

Internet-Draft             Traceability Claims              October 2025


Document History

   -03

   *  Made currency clarifications.

   *  Suggested transport_mode values.

   *  Use TBDn names for CWT requested claim numbers.

   -02

   *  Enabled the use of GLUE identifiers.

   *  Renamed legal_jurisdiction to legal_jurisdictions and made it an
      array.

   *  Added references for Incoterms and Harmonized System codes.

   *  Defined that numbers can be integers or floats.

   *  Added an example claims set.

   *  Added Brent Zundel as an author.

   -01

   *  Added registrations of JWT claims corresponding to the CWT claims.

   *  Updated CWT Claims registrations to supply all fields in the
      registration template.

   *  Fixed IANA Considerations header, as suggested by A.J.  Stein.

   *  Added references for ISO specs.

   *  Specified the use of [ISO.3166] alpha-2 country code strings and
      [ISO.4217] alpha-3 currency code strings.

   *  Added references to sources of traceability claims.

   *  Added Michael B.  Jones as an author.

   -00

   *  Initial individual draft





Prorock, et al.           Expires 23 April 2026                [Page 29]

Internet-Draft             Traceability Claims              October 2025


Authors' Addresses

   Michael Prorock
   Tradeverifyd
   United States
   Email: m.prorock@tradeverifyd.com


   Michael B. Jones
   Self-Issued Consulting
   United States
   Email: michael_b_jones@hotmail.com
   URI:   https://self-issued.info/


   Brent W. Zundel
   Tradeverifyd
   United States
   Email: brent.zundel@gmail.com
































Prorock, et al.           Expires 23 April 2026                [Page 30]
