diff --git a/kuser/kinit.1 b/kuser/kinit.1
index 8b749b220..9c8a8ce26 100644
--- a/kuser/kinit.1
+++ b/kuser/kinit.1
@@ -46,6 +46,10 @@
 .Fl -enctypes= Ns Ar enctypes
 .Xc
 .Oc
+.Oo Fl a Ar addresses \*(Ba Xo
+.Fl -extra-addresses= Ns Ar addresses
+.Xc
+.Oc
 .Op Fl -fcache-version= Ns Ar integer
 .Op Fl -no-addresses
 .Op Fl -anonymous
@@ -152,6 +156,17 @@ Request tickets with this particular enctype.
 Create a credentials cache of version
 .Nm version .
 .It Xo
+.Fl a ,
+.Fl -extra-addresses= Ns Ar enctypes
+.Xc
+Adds a set of addresses that will, in addition to the systems local
+addresses, be put in the ticket. This can be useful if all addresses a
+client can use can't be automatically figured out. One such example is
+if the client is behind a firewall. Also settable via
+.Li libdefaults/extra_addresses
+in
+.Xr krb5.conf 5 .
+.It Xo
 .Fl -no-addresses
 .Xc
 Request a ticket with no addresses.