ROMs as a concept are legal. For instance, if a programmer writes a game for the Super Nintendo and releases it as a ROM image, that ROM is legal. There are many homebrew ROMs that are perfectly legal to download and redistribute. In a few rare cases, even commercial ROMs have been provided legally, either for free or for a price. However, most games that you can find as ROMs are not legally downloadable.