A Program Logic for Verifying Secure Routing Protocols (Logical Methods in Computer Science, 2015)