Authorize.net's CIM to store the payment data, and a nightly cron job to charge whoever's monthly subscription fee is due. It's not that hard, everyone managed before these subscription-as-a-service companies popped up in the past few years.