If you’re able to connect to ARC via cellular data, I’m assuming you’ve set up some alternative means of NAT traversal or remote access (Wireguard, OpenVPN, etc.)?
If you’re determined to rely on the port forward, I’d first check whether your ISP has implemented any carrier-grade NAT (CG-NAT) for your account tier that would block port forwarding.
If not, then you can either enable UPnP in the router to auto-configure, or create a manual TCP rule using the port number and IP address from Roon Settings → ARC.
However, most RoonServer machines can also host Tailscale alongside Roon, which will allow for robust and reliable NAT traversal outside of port forwarding.