RBL checks happen based on the incoming IP of the connection and can dispatch a 'bad' connection very quickly. SPF checks must wait for the SMTP conversation to begin and are therefore require more resources. In a high-volume situation, doing RBL first is "cheaper"