A ROM is legal to have "if" you actually own a copy of that game...blah, blah, blah....
If not, you have to delete the ROM from your hard drive 24 hours after downloading it.