MAME (and also the MESSUI fork) product as a whole are GPL2+.
The GPL2 license permits you to sell it.

Selling the ROMs is a problem though.
Not our problem, but a problem between the seller and the rightsholders.