I haven't been daring enough yet to try one, but there's tons of sites that "claim" to be legit and it's hard to know if they are or not.
The RIAA website does provide a small list of those providers they are in favor of.
I hope someone knowledgable posts here, the legal issues are confusing to me and the only legal answers on the RIAA website seem to be No, No, and No.