Try reading through the control spec for mapaddress here... https://gitweb.torproject.org/torspec.git/tree/ Can also search for cached descriptors or consensus in that whole doc set, and in the torproject site and lists for exitlist, tordnsel, relay fingerprints, etc.