<PerProviderSubscription>
	<UpdateIdentifier>1</UpdateIdentifier>
	<Cred01>
		<Policy>
			<PreferredRoamingPartnerList>
				<RP01>
					<FQDN_Match>another.example.org,includeSubdomains</FQDN_Match>
					<Priority>10</Priority>
				</RP01>
				<RP02>
					<FQDN_Match>example.com,exactMatch</FQDN_Match>
					<Priority>20</Priority>
				</RP02>
			</PreferredRoamingPartnerList>
			<PolicyUpdate>
				<UpdateInterval>10</UpdateInterval>
				<UpdateMethod>SPP-ClientInitiated</UpdateMethod>
				<Restriction>Unrestricted</Restriction>
				<URI>https://policy.example.com/run</URI>
				<TrustRoot>
					<CertURL>http://example.com/policy-root.der</CertURL>
					<CertSHA256Fingerprint>aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa</CertSHA256Fingerprint>
				</TrustRoot>
			</PolicyUpdate>
		</Policy>
		<CredentialPriority>1</CredentialPriority>
		<AAAServerTrustRoot>
			<Root1>
				<CertURL>http://example.com/cacert.der</CertURL>
				<CertSHA256Fingerprint>aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa</CertSHA256Fingerprint>
			</Root1>
		</AAAServerTrustRoot>
		<SubscriptionUpdate>
			<UpdateInterval>4294967295</UpdateInterval>
			<UpdateMethod>SPP-ClientInitiated</UpdateMethod>
			<Restriction>HomeSP</Restriction>
			<URI>https://remediation.example.com/run</URI>
			<TrustRoot>
				<CertURL>http://example.com/subscription-root.der</CertURL>
				<CertSHA256Fingerprint>aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa</CertSHA256Fingerprint>
			</TrustRoot>
		</SubscriptionUpdate>
		<HomeSP>
			<FriendlyName>Example Operator</FriendlyName>
			<FQDN>w1.fi</FQDN>
			<RoamingConsortiumOI>010203040506</RoamingConsortiumOI>
		</HomeSP>
		<Credential>
			<CreationDate>2012-12-01T12:00:00Z</CreationDate>
			<UsernamePassword>
				<Username>hs20-test</Username>
				<Password>cGFzc3dvcmQ=</Password>
				<MachineManaged>TRUE</MachineManaged>
				<EAPMethod>
					<EAPType>21</EAPType>
					<InnerMethod>MS-CHAP-V2</InnerMethod>
				</EAPMethod>
			</UsernamePassword>
			<Realm>w1.fi</Realm>
		</Credential>
	</Cred01>
</PerProviderSubscription>