Because in TCP/IP model, any protocol running over the top of TCP is termed as application layer protocol. Since BGP uses TCP for communication, it comes at layer 5 and therefore termed as application layer protocol.