When I plug that same cable into my Airport Extreme (version 7.7), I get speeds around 4MB/s.
First, are your measurements in Mega Bytes per second or Mega Bits per second? Your post indicates Mega Bytes. I just want to be sure. Internet data transfer rates / bandwidth are typically indicated in Mega Bits ... so a Gigabit service = 1000 Mbps, not 1000 MBps.
Based on your "840MB/s" statement, I will assume that you were getting around 840 Mbps of data throughput. This would be not be unreasonable for Gigabit Internet service.
If you meant 400 Mbps at the AirPort Extreme, then, this would not be out of range for what the Extreme (in its default router mode) can deliver. You can get an idea on how a number of routers perform at this SmallNetBuilder site. All routers, with NAT enabled will reduce the available bandwidth. That's how the OSI model works.
ISPs, typically sell / advertise upload / download speeds for bandwidth, not data throughput. There is a significant difference. Also, most consumer-grade Internet service does not guarantee those bandwidth values. You would have to step-up to business-grade service for that.
Router manufacturer's also sell / advertise the potential bandwidth as their router's speed measure. Most of the time, to achieve those speeds that router would have to be configured as a bridge (routing disabled).
As always, caveat emptor when reviewing ISP/manufacturers' claims.