The PNR confirmation codes (Record Locators) are typically a hash algorithm that maps to a particular disk storage loaction (file address). The numbers are random, though there is typically a table of dirty words that is used to compare and exclude the use of "bad words" as record locators.