Roon ARC needs the public IP address to communicate with your core. If you can’t set this up with port forwarding to your private network, then your options are limited.
What you have described is atypical, and is unlikely to be a supported configuration. The following post may assist you.