These cookies are dynamically generated by a browser using JavaScript, as part of BIG-IP ASM's client integrity checks.
Scripts such as PHP cURL, python, etc. cannot execute JavaScript, and therefore cannot retrieve or calculate these cookies automatically.
The ASM injects JavaScript into the client’s browser, which dynamically generates specific cookies. This helps verify that the request is coming from a real browser (i.e. a human user) rather than an automated script or bot.
If these cookies are missing, the ASM may flag or block the request as suspicious.

Please read more about here: https://my.f5.com/manage/s/article/K6850#main