I've read the white paper of Monero(CryptoNote v2.0) and a problem confuses me.
This paper says that when Alice sends coin to Bob, she uses P = Hs(rA)G + B as a destination key and packs value R = rG "somewhere" into the Tx.
Since Bob needs R for checking whether this transaction goes to himself. Where can I find this R = rG in the public Monero blockchain data?
Or maybe the payment ID is actually this R?