 between the pipe and the roof itself, and then there's flashing that goes around that. That's the most common place for a roof leak when you have it leak right above a bathroom. And a lot of times, contractors will try to sort of tar that in place, but that's a bad idea. What I would recommend is to take out the plumbing vent flashing, and you can do that easily by removing a few shingles in that area.