Is the RsaSHA256Signer thread safe and reusable or is it intended to be one-time use only?
Yes RsaSHA256Signer is thread safe and reusable. It uses java.security.Signature to create the signature.
http://docs.oracle.com/javase/7/docs/api/java/security/Signature.html